last executing test programs:

11m16.921191852s ago: executing program 32 (id=512):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
prlimit64(0x0, 0x8, &(0x7f00000017c0)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x2010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/133, 0x85}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/98, 0x62}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f0000001d00)=""/209, 0x45}], 0x6, &(0x7f0000001940)=""/125, 0x7d}, 0x3}, {{&(0x7f00000019c0)=@ll, 0x80, &(0x7f0000001c00)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000001e00)=""/256, 0xf4}, {&(0x7f0000001cc0)=""/23, 0x17}, {&(0x7f0000001b40)=""/136, 0x88}], 0x4}, 0x7}], 0x2, 0x2, 0x0)
ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)="a24e4d40c3f340bee7a45f2398f6808d5614b13d27dd556fabeff46beb06167377953cbe8cc8e058b68b66268b1e851391d7092491d7a68c69e43d2a7e61c7c06609527f61f0c8b99b5f8be14e268959ab656aafc591ae59c58d7074ef5ff3f4fcd82665fdaaf4e63a93c531b04693435425d1e8ac64d37e0cf022", 0x7b})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x35000, 0x1800}, 0x20)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r5, r3, 0x8, 0x0, &(0x7f0000000180), 0x8b, 0x4, 0x15c2, 0x40, 0x3, 0x0, 0x1, 'syz0\x00'})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060101000018a10000000000000000050004000000000015000300686173683a69702c706f72742c6e6574001500000900020073797a3000000000050004000000000004000780"], 0x4c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x8000000000000001, 0xec48d728d29e1d31)
dup(r7)

10m51.930880431s ago: executing program 3 (id=572):
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x9, 0x0, "000080f100df00000000000000000009f600"}) (async)
r1 = syz_open_pts(0xffffffffffffffff, 0x801)
r2 = dup3(r1, r0, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
listen(r3, 0x100) (async)
fanotify_init(0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='schedstat\x00') (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}], 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r4], 0x1000f)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8) (async)
r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1b, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) (async)
ppoll(&(0x7f00000001c0)=[{r8, 0x440}, {r8, 0x439}], 0x2, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r7, 0x2}, 0x8) (async)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r7, 0x4018}, 0x8)

10m51.797132884s ago: executing program 3 (id=573):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0))
personality(0x4100001)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="af742ed3ccb6bcf9bf8e24ac329e90e7bb9025044c0fd57de49d7e3d2247ecfd0953df2309764cfe3021930331cdc1eb8be30f03eff11a2f01a92b0b03a614f623c5dcc359b191e67150995dd7673cd7cdcb1b78ad83903026756998d2e2", 0x5e}, {&(0x7f00000002c0)="ef15eb7a3f717731b261f387472eea5a0cd149991949880569042cfd4447fc3880da68da36e777d79f84b8c8750ab7a07e06928f2e", 0x35}], 0x2, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0xe}], 0x18, 0x10000804}, 0x404c000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6b24b3c2302236ac00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x1ff}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x6, 0x0, @val=@tracing}, 0x40)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"])
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$netlink(0x10, 0x3, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x2d, 0x0, &(0x7f0000000040)="313432190004c7c6c67f150782bca16adf3655c4f04a7890592814e7e559832a2568201a9ba4dfa9a9bed1ec03", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
socket$kcm(0x11, 0x3, 0x0)

10m50.671084174s ago: executing program 3 (id=575):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

10m50.37364894s ago: executing program 3 (id=577):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xc942d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@deltaction={0xcc, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2810}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xffffffffffffffab, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xcc}, 0x1, 0xf0ffffffffffff}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="009200"/20, @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0500000002000000020000000300"/28], 0x50)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x7040, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)

10m49.223710548s ago: executing program 3 (id=581):
unshare(0x20020000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x40000001)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xa)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]})
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffb)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0xc, '\a\x00'}, @main=@item_012={0x2, 0x0, 0x9, "91ac"}]}}, 0x0}, 0x0)

10m47.2118737s ago: executing program 5 (id=514):
r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='\t s'], 0x8)
r3 = fsmount(r0, 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)

10m42.624236694s ago: executing program 3 (id=584):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002a80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x200000000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000026, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioprio_get$uid(0x3, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x2, 0x2)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000500)={{}, 0xe7})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x88c00, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f00000002c0))

10m42.557710782s ago: executing program 5 (id=585):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffff4, 0x1}, 0x20) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000800000010b810141e159d0102030109021b0001040000000904ea02019b22b60009050102100000fa00"], 0x0)

10m29.560371443s ago: executing program 33 (id=574):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f00000004c0)=0xe120) (async)
sched_setscheduler(0x0, 0x5, &(0x7f00000004c0)=0xe120)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) (async)
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f00000007c0)=""/4082, 0xff2}], 0x5}, 0x4}], 0x1, 0x40000000, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r7, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

10m17.098260176s ago: executing program 34 (id=582):
r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x4000090)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)

10m16.295548668s ago: executing program 35 (id=583):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x1, {0x0, 0xf0, 0x4}}, 0x18)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r10, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2b3d95ef9254fd574583aeca60c0047d55ba5841bc7a0f8886ed70c6143a1bdb36dd16500621221ef577a494bc15540882adb63e30", @ANYRES16=r3, @ANYBLOB="00010000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8041)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0)

10m16.102998109s ago: executing program 36 (id=585):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffff4, 0x1}, 0x20) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000800000010b810141e159d0102030109021b0001040000000904ea02019b22b60009050102100000fa00"], 0x0)

10m15.734965465s ago: executing program 37 (id=584):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x200000000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000026, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioprio_get$uid(0x3, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x2, 0x2)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000500)={{}, 0xe7})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x0)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x88c00, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f00000002c0))

6m34.063383159s ago: executing program 7 (id=1141):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r2, r2, 0x0, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000060000002c0012800e00010269703665727356616e0000001800028008000c000500000006000e00030000000400120078389418c2821b7cbe3db40485325aa3de4c43ff2a044fcbf412857358592459a474ce3aa6103bdb7110de2f4cb8721470574870f49b1d2d195eb7cac376ddd2b8deb4624c5bd777bc44"], 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x4)
set_mempolicy(0x5, &(0x7f0000000080)=0x3, 0x961)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000380)=0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4aa000, 0x0)
write$dsp(r6, &(0x7f0000000200)="47c3a01b69e187320035a53dbe73a058ef6c5ad1a7a22e78387e7ce4f7fa05cc706e890c58269fadda857d541dbad33262d77621568db7c07af235654e4bec2e7b1690f7bc52d9a81c4a4c277b6ee2a592383b8dbae27d959a6132227c5d3627c8d3ea0e5ebf418a8a78501420", 0x6d)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1000)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0xd413, 0x3, 0x6, 0x4}, {0x7f, 0x3, 0x4, 0x3}]}, 0x10)

6m31.675138386s ago: executing program 7 (id=1145):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
rename(0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="46bb6f4378eaee8835497533c876967fcc77eb245f773894ac715a692636708de0237e81ea843da0f6f5eb14da23b51f50bef6dfbd4880bcf4d833da2818fc0a3c960b42f82514fe650bf3dca283c6fab850e3e109a0639aab7620506f59946e9809b8000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r9, 0x32, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/116, 0x74)

6m30.083149706s ago: executing program 7 (id=1146):
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2, 0x10100}, &(0x7f0000000100), &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00')
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010b4e876dc415cce2000254e30008000700", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x2c}}, 0x890)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
pipe2(&(0x7f0000000180)={<r6=>0xffffffffffffffff}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000300)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [], 0x7}})
syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600015a25b505240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)

6m27.989266158s ago: executing program 7 (id=1151):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x108, &(0x7f0000000000)=0xa, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r1, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

6m27.573046323s ago: executing program 7 (id=1154):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
getrusage(0x0, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000002500)='net/rt_acct\x00')
socket(0x10, 0x5, 0xfffffffc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020)
ioprio_set$uid(0x3, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0xfe, 0x0, 0x0, r1, 0x0}])
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000bc0), 0x26200, 0x0)

6m26.088531383s ago: executing program 7 (id=1157):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_create(0x0, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
socket$nl_route(0x10, 0x3, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
memfd_create(0x0, 0x2) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
dup(r2) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) (async)

6m24.31555589s ago: executing program 9 (id=1162):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0xffffffff, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x118)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x40000)
sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r2, 0x2}}, 0x18)

6m23.115550019s ago: executing program 9 (id=1165):
r0 = epoll_create(0x3ff)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000000})

6m22.705336712s ago: executing program 9 (id=1167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x7}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @datasec={0xc, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x6}, {0x5, 0x4, 0x6}, {0x3, 0x10, 0xfffffffe}, {0x1, 0x5, 0x3e4e}, {0x2, 0x40, 0x6}], '\v'}]}, {0x0, [0x2e, 0x51]}}, &(0x7f0000000580)=""/132, 0x9c, 0x84, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000001000000200000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x1c, 0x76, 0x4, 0x0, 0x2, {0x3}, [@NHA_FDB={0x58}]}, 0x1c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800010000fddbdf2500000000c92a4c074598e9f70d3dfbc3093776e4e2f72c28f23819676ca5649471a58a5c29eb13248ad355f8773f3d54624a37324caf992ffa298dca6f", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)

6m21.726603383s ago: executing program 9 (id=1168):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000440)=ANY=[@ANYBLOB="04014495994910e26264c1f7bfc1e75ef3c5fe346d"], 0x2, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000300)={0x3})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x4)
close(r3)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], 0x6, 0x2, 0x1, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
lsetxattr$security_capability(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f00000005c0)=@v1={0x1000000, [{0x49b1, 0x6}]}, 0xc, 0x2)
remap_file_pages(&(0x7f00000a1000/0x2000)=nil, 0x2000, 0x0, 0xc685, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
chdir(&(0x7f0000000080)='./file0\x00')
pwrite64(r2, &(0x7f0000000280)='+', 0x1, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)

6m19.031285652s ago: executing program 9 (id=1176):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@mcast1, @in6=@private2, 0x4e22, 0x0, 0x1, 0xfff4, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {0x0, 0x0, 0x2, 0x6}, 0x2253, 0x6e6bb0}, {{@in6=@local, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x2}}, 0xe8) (async)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async)
r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2000})
io_uring_enter(r8, 0x8aa, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

6m18.055338446s ago: executing program 9 (id=1179):
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000540), 0x7f41, 0x400000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000580)=0x21)
r2 = syz_clone3(&(0x7f00000004c0)={0x8000, &(0x7f0000000000), &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0), {0x22}, &(0x7f0000000340)=""/231, 0xe7, &(0x7f0000000440)=""/77, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58)
sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$peeksig(0x4209, r6, &(0x7f0000000580)={0x1, 0x1, 0x1}, &(0x7f0000000480)=[{}])
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)='nfsd\x00', 0x808041, &(0x7f0000000300)='%!*]:\'@\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x6)
r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x4, 0x4, 0x43, 0x9})

6m11.436139656s ago: executing program 38 (id=1157):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_create(0x0, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
socket$nl_route(0x10, 0x3, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x10, 0xcc, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}]}]}, 0x24}}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
memfd_create(0x0, 0x2) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
dup(r2) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b0d47078b089b34073b68090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a97370614060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async)

6m3.551182086s ago: executing program 39 (id=1179):
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000540), 0x7f41, 0x400000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000580)=0x21)
r2 = syz_clone3(&(0x7f00000004c0)={0x8000, &(0x7f0000000000), &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0), {0x22}, &(0x7f0000000340)=""/231, 0xe7, &(0x7f0000000440)=""/77, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58)
sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$peeksig(0x4209, r6, &(0x7f0000000580)={0x1, 0x1, 0x1}, &(0x7f0000000480)=[{}])
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)='nfsd\x00', 0x808041, &(0x7f0000000300)='%!*]:\'@\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x6)
r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x4, 0x4, 0x43, 0x9})

2m33.123751715s ago: executing program 1 (id=1802):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x20, 0x2)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5, <r6=>0xffffffffffffffff})
ppoll(&(0x7f0000000200)=[{r4}, {r6}], 0x2, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f00000057c0)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000300)=@nullb, r7, &(0x7f0000000340))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000)
kcmp(0x0, 0x0, 0x3, r8, r8)
r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)
r12 = socket$alg(0x26, 0x5, 0x0)
getsockopt$SO_TIMESTAMP(r12, 0x1, 0x4b, 0x0, &(0x7f00000001c0)=0x49)
syz_usb_control_io(r10, 0x0, 0x0)
r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r13, 0x0, 0x0)
syz_usb_control_io$hid(r13, 0x0, 0x0)

2m32.405849175s ago: executing program 1 (id=1807):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x7000000)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@userptr={0x1, 0x6, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xf, "b9cc0100"}, 0x0, 0x2, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@userptr={0xfffffffe, 0x0, 0x4, 0x400, 0x2000017, {0x77359400}, {0x5, 0x2, 0x0, 0xd, 0x49, 0x8, "0a5ccf21"}, 0x8, 0x2, {&(0x7f0000000040)}, 0xff, 0x0, r0})
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x36ea}}, './file0\x00'})
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0xc038563c, &(0x7f0000000640)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@remote, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x48, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000004d7e8404c7e02dfcf60000000061122c00000000009500000000000000e02a30273f191779001b7ef3aed2772b57b04b60e935cf8ad80004f026000000004cdc1d17a75edd220bc90c5df95e7ec392bd506fac102c98fa6c0cdbe19c38a1b269207f901e013bd4ffce707a23ff2729047e9274e1c454424ac129f3364f8daa066f8c181343b5f40fed62514f10d936e0a408f0abda4328e4b3fbc7d96353d5a4788034870801904a064d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000240)=""/139, &(0x7f0000000300)=0x8b)
sendto$inet6(r4, &(0x7f00000004c0)='\x00', 0x1, 0x8000, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0xffffffffffffff86)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080))
ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000003c0)={0x0, 0x0})
r9 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80)

2m31.352928772s ago: executing program 1 (id=1808):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x1f}]}}}}}}}}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc9, @none, 0x1, 0x6, 0xf, 0xfff, 0x6, 0xc4}}}, 0x14) (async)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0xffffe8e4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async, rerun: 32)
sendto$packet(r3, 0x0, 0x0, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 32)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000002040)={0x55c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x217a, 0x8, 0xb8}, {0x200, 0x4, 0x7f, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb7}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x845}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) (async, rerun: 64)
r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x6e, 0x0)
connect$unix(r5, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE}}, 0x7) (async, rerun: 64)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x810, r6, 0x2b41b000) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)

2m31.030431744s ago: executing program 1 (id=1811):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x2, 0x3a, 0xe5, 0x4, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x3b3, 0xf, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x75, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x40, 0xd, 0x3, "def0ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb04}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = epoll_create1(0x0)
r3 = eventfd2(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x20000006})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44804}, 0x20044801)

2m28.57392945s ago: executing program 1 (id=1827):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
syz_open_dev$video4linux(0x0, 0x0, 0x0)
r0 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'batadv_slave_1\x00', {}, 0x1})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000008c0)={0x0, 'bond0\x00', {0x10000003}, 0x2})
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400e290000002922b34493ad846e6315bd8ceb828bdb1995db13e9779753fc52c64a5b3d34359c72dc3b3428599243c5968c0e8ad5242b5fca73a99f93965147232a73db4e1959b0189bcfb82b684610ab53831cc02475395617bec3c6dc10880a9de60fda18a2b20ee807768fb934be8eb81d107374295d9ed70b2b6649698eda7b5f65315da46698ae676f076d2bd10d143042fd9d94fde527c8ee08bdeaa86d109414ea0dc795388e18396fb8000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x4}, @CTA_SYNPROXY={0x4}, @CTA_TUPLE_MASTER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x8001)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe(&(0x7f0000000300))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000001c0)="186bf7ffffffffffffffef0a32", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3dc, 0x9, 0x1, 0x6940000, 0x80, 0x9, 0x77}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$tcp_congestion(r6, &(0x7f0000000140)='htcp\x00', 0x5)

2m26.660558457s ago: executing program 1 (id=1833):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000540)=""/253, 0xfd, <r2=>0x0, &(0x7f0000000640)=""/234, 0xea}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r6, 0xaeee9fa2d63adc8e, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000300)=0x1)
r9 = syz_open_dev$swradio(0x0, 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000000)={0x98f905, 0x8})
r10 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
write$smackfs_access(r10, 0x0, 0x34)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
getpid()
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xd8f5)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="282c651336f4b115aab0a08fca92ceeebf379551e3d99328f6dce868c3ceee3d39b0ea4a1806f5dcbdc5c8533377f6c57f50ff73e39e12c871cb5640b28312c02d16e55dc67b98a04ac1def5ef4760f9fe332f9efdb9f587d543487eecf4f6259d4c4800f9f052ea315489b88d1b6884ef5697fbd3ac0b88f295f343b07ff111d84b703f38", @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x4000004)

2m12.186852548s ago: executing program 40 (id=1833):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000540)=""/253, 0xfd, <r2=>0x0, &(0x7f0000000640)=""/234, 0xea}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r6, 0xaeee9fa2d63adc8e, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000300)=0x1)
r9 = syz_open_dev$swradio(0x0, 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f0000000000)={0x98f905, 0x8})
r10 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
write$smackfs_access(r10, 0x0, 0x34)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
getpid()
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xd8f5)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="282c651336f4b115aab0a08fca92ceeebf379551e3d99328f6dce868c3ceee3d39b0ea4a1806f5dcbdc5c8533377f6c57f50ff73e39e12c871cb5640b28312c02d16e55dc67b98a04ac1def5ef4760f9fe332f9efdb9f587d543487eecf4f6259d4c4800f9f052ea315489b88d1b6884ef5697fbd3ac0b88f295f343b07ff111d84b703f38", @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x4000004)

16.054724421s ago: executing program 0 (id=2245):
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x1e0, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x1cc, 0x1, [@m_skbmod={0xe8, 0x1f, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x56, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x48, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x26a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x98, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x69, 0x6, "2d3226d2e3c57ead557080202f648bcdfedc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf0d6783c1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1e0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000010000000000", 0x58}], 0x1)
r5 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xb, 0x200) (async, rerun: 64)
r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) (async)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000100)=0x200) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_emit_ethernet(0x6a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random=0x3632, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x4c}}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64)

15.827054554s ago: executing program 0 (id=2247):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_mark(0xffffffffffffffff, 0x565, 0x48000000, 0xffffffffffffffff, 0x0)
dup2(r4, r6)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x1)
r8 = dup2(r4, r7)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000540)={0x1, 0xcc, 0xd, 0x9, 0x6, 0x7f, 0x8, 0x45, 0x7, 0x1, 0x1000, 0x1})
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd1, &(0x7f0000000600)=""/209, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
close(r9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20)
io_setup(0x7, &(0x7f0000000280))

12.635754066s ago: executing program 0 (id=2254):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

9.661041687s ago: executing program 0 (id=2258):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="4803219e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x1f3d, &(0x7f0000000300), &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000240))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="0ff55e81d5227ddccdaac2844b7b8288f6b3005094cec6199c8920af7bd73a5b954811e9636991af0f4e1fc03db9e397b97fc3240ac6a63eb504966dd0f2b3451fef8fdf430e1293e12c36ec49370c2536ab96712dc13afd6a666e88e4c056363c59b6b3ad84a58777b6f585990b8b2aa76a0ea73f9d1838a183a394058a439f91a8f3ed673247e866486b26c6029e2cc7be7349290314f25a0dc63c49f8e1b2120471e5"], 0x8)
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x1, 0x4})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffff7d}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ee311a0, @void, @value}, 0x94)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r7 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

9.37828805s ago: executing program 8 (id=2260):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x184, {<r0=>0xffffffffffffffff}, {0xee00}, 0x1, 0xfff})
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
landlock_restrict_self(r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e)
sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x4f5e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESHEX=r3, @ANYBLOB="02"], 0x10)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0}, 0x40)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3], 0xd8}}, 0x0)

9.137656964s ago: executing program 6 (id=2261):
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000358d462cf5341c7c93d337dbd7a9da1f9b"], 0x0}, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
syz_usb_control_io(r0, 0x0, 0x0)

8.167967841s ago: executing program 8 (id=2264):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x6791, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x0, 0xfffffffe})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x65)
connect$inet(r7, &(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000040)="df", 0x1, 0x2000c004, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1}, 0x6}], 0x1, 0x40010002, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

8.101039802s ago: executing program 8 (id=2265):
r0 = socket(0x2b, 0x1, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x10001, r0, 0x3, {0x1, 0x6d1}, 0xf0}, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

7.964464488s ago: executing program 2 (id=2266):
r0 = syz_usb_connect$uac1(0x5, 0xdd, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x40, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x0, 0xe}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x5, 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x1, 0x4, [0x9, 0x3, 0x4, 0x5], 0x5}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x0, "c51eef10cd"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfa, 0x1, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x17d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x8, "11c333", "aa4894"}, @as_header={0x7, 0x24, 0x1, 0xcc, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa6, 0x0, 0x93, 0xf7, 'L'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9, 0x3b, "bfe86c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x9, "c61e08c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x4, 0x8, {0x7, 0x25, 0x1, 0x0, 0x1, 0x400}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x10, 0x2a, 0x0, 0xff, 0x5}, 0xaa, &(0x7f0000000140)={0x5, 0xf, 0xaa, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x1, 0x8, 0xd0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfa, 0x10, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xba, 0x0, 0xe7b}, @generic={0x4c, 0x10, 0x4, "f590901b82abfa5c3c083b37bdda6da1bbc4b8a3a0a2d57ddb037831d26d742eb7650ae2dc4765ff58f11fb2d2fab84349c31edb194a06e992f76c87a9cf4095c34763a4c19f036be3"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0x8707, 0x5, [0xf, 0xf, 0xff0030, 0xc0]}, @generic={0x1e, 0x10, 0x3, "3f65ecfab6b2ba34e3cc20c55f22bcd61af4292f4e50d38dc1ca9d"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}]})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x20, 0x2f, 0x7, {0x7, 0x3, "ccbe191264"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000300)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x72, 0x0, 0x6, 0xf000, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x39, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x9, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x16, 0x60, 0x1, 0xa, "c60578c2", "d3600b5d"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x8, 0x1, 0x9, 0x40, 0xff, 0xba06}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x20, 0xc, 0x3e, "0cb82ac95d703e66c2ffc29299bf437ba6072c0c37878ab0e287f56d727999440e908c857fcf1dbe51b6dc0e4247b373196ea1c268f0aca4602d878eb25c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0xb, 0x2, 'R\v'}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "107f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x9}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000a40)=<r2=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000a80)=r2)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000009c0)={@mcast2}, &(0x7f0000000a00)=0x14) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000009c0)={@mcast2}, &(0x7f0000000a00)=0x14)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0xf9, 0xcd, 0x5a, 0x20, 0x7c0, 0x1503, 0xb8b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x7, 0x10, 0x40, 0x5, [{{0x9, 0x4, 0xb4, 0x9, 0x1, 0x5c, 0x31, 0xae, 0x8, [], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x1, 0x63, 0x3}}]}}, {{0x9, 0x4, 0x39, 0x8, 0x2, 0x65, 0xb0, 0xb4, 0xe, [], [{{0x9, 0x5, 0x6, 0x2, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x3, 0x6, 0x0, [@generic={0x7, 0x5, "a9dfba6edc"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})

7.887483455s ago: executing program 4 (id=2267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010048000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

6.706365571s ago: executing program 0 (id=2268):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1)
socket$alg(0x26, 0x5, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
gettid()

5.802907397s ago: executing program 6 (id=2269):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x24}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab51", @ANYRES8, @ANYBLOB='Nd'], 0x53) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01) (async)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

5.428521393s ago: executing program 6 (id=2270):
r0 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0)

5.418448257s ago: executing program 4 (id=2271):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="12000000000000001e8a6dfa1329c6bf9b203738079333ee7eae1beba9c427e7cced75a7ebc756768b0a7e113cd4f5462e6506bcac00000000000000000000000a00"/75, @ANYRESDEC=0x0, @ANYRES16], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8}, {{&(0x7f0000000680)=@can={0x1d, <r0=>0x0}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f00000052c0)=""/4110, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000004280)=""/4109, 0x100d}, {&(0x7f0000000700)=""/133, 0x85}, {&(0x7f0000001840)=""/235, 0xeb}], 0x7, &(0x7f00000007c0)=""/77, 0x12}, 0xfffffff8}], 0x2, 0x4, &(0x7f0000001f40))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000002240)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x15)
setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000002040)={@ll={0x11, 0x18, r0, 0x1, 0xc4, 0x6, @broadcast}, {&(0x7f0000001f80)=""/117, 0x75}, &(0x7f0000002000), 0x1}, 0xa0)
finit_module(r8, &(0x7f00000021c0)=']%-&)%[)![\x00', 0x1)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae0e000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10)
getuid()

5.026958822s ago: executing program 6 (id=2272):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000400)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}], 0x10, 0x36, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x10001)
mmap(&(0x7f00006cb000/0x4000)=nil, 0x4000, 0xb635773f05ebbee7, 0x10, r0, 0x4e373000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x5d, 0xa, &(0x7f00000002c0)="76c45e42dcef68274e67180a6509db9dc14631d0b5e65320b5d343af0ba93ce0d79e9112c3a7a1ed04eee68bb67d63051a87a351fd80fca4995712557ec27fdc44e3c4c9def01b39458b11ba4359d380fbad52a7aab78747d5caef40c2", &(0x7f00000000c0)=""/10, 0x338, 0x0, 0xfe, 0x5c, &(0x7f0000000680)="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", &(0x7f00000004c0)="af9781be8b882448c7aef6efe1060e90c58f3ef2a03b65ba7e8f0c9a88f3807c09638f4cd38b60a99b4782f1f2388385be5fcb7cbe0c1901145fbb6dfd419f77443129f04463bd8deef6cecb7774d63a7af24b076d54efdef0b0c942", 0x0, 0x0, 0x5}, 0x50)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a0000000000000000070000a1", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r10 = syz_open_dev$video(&(0x7f0000000580), 0x81, 0x0)
ioctl$VIDIOC_G_PARM(r10, 0xc0cc5615, &(0x7f0000000140)={0xd, @output={0x1000, 0x0, {0x3, 0x6}, 0x9, 0x3}})
openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0)

4.912675636s ago: executing program 4 (id=2273):
r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=0x4) (async)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x17)
close(r2) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="ab4b794355cda2830cbd3d60a0"])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r2], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/71, 0x47, <r7=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44"], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x3, @val=@target_btf_id=r7}, 0x14) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async)
prlimit64(0x0, 0xd, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)) (async)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) (async)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x1}) (async)
r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x5, 0x4e, 0x8, 0x2e1, 0x7, 0x101})
ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f00000001c0)={0x140, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {0xfffffffc}, {0xfffffffe, 0x0, 0xffffffff}, 0x0, 0x3f0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0xd})
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000640)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r12, @ANYRES16=r11, @ANYRES8=r11], 0x0)

4.848776424s ago: executing program 2 (id=2274):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x184, {<r0=>0xffffffffffffffff}, {0xee00}, 0x1, 0xfff})
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
landlock_restrict_self(r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e)
sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x4f5e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRESHEX=r3, @ANYBLOB="02"], 0x10)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0}, 0x40)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3], 0xd8}}, 0x0)

4.54005634s ago: executing program 8 (id=2275):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x904}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x4004) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r3, 0x0) (async)
r7 = dup(r2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58004"])

4.471959016s ago: executing program 4 (id=2276):
socket$netlink(0x10, 0x3, 0xf)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
eventfd2(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = getpid()
prlimit64(r3, 0xf, &(0x7f0000000040)={0x6, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"88ba8a8087b219bf6b87e7f7c46ab59bf82717a52ab0b8ccdf0f5bd2320b01c5"})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, 0xffffffffffffffff, 0x587ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05000000000000006985060000000c00f8ffd05bc5", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="19000000", @ANYRES16=r8, @ANYBLOB="0500ffffffff080000002e00000008000300", @ANYRES32=r9, @ANYBLOB="050034008b00000005001801270000000400fa00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x880)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000500)=""/173, 0xad}, {&(0x7f0000000680)=""/191, 0xbf}], 0x2, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x20)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})

4.386694971s ago: executing program 4 (id=2277):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x34, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)=[0x0], <r4=>0x0}, 0x40)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200121504000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00?\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="f957f112", @ANYRES32=0x0, @ANYRES64=r4], 0x20)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="43877060", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001a000000000000000095"], &(0x7f0000004780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)="e892d09d976a79e713ff508ffb7dc1b13d2314a5c2bc00d7"}, 0x50)
syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ff843500180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000ede4c66c9f7e2302c8229fe260356915a5fb3b0e0000000e6f7d8ebeb9a95a12f10071e1228b64e95ffd2b037997589b85f733051fc5d3dcce1b1a8e728fe48d2059f95f491325fc4264898c10fb581c4b9532329887155d53d51c02d42368daf94b17a90578b471d6fc84eab01d7c195e2fc076ea6f974338ee472f91ff567ee16d747220be19ebba7650f23b66d4372f68cfa9fe04391505fe96099a92a1e50531785b4b66be2c1ccb5597f256e62f532f8778528237202b50118ae080b79cc6f66cae612dc3aa37ae2aa05fd08e221abb26b214c9da54eb63f3a88481745b39c4b5124701a17a10e9cd"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
pipe(&(0x7f0000000080)) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x34, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)=[0x0]}, 0x40) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200121504000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00?\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="f957f112", @ANYRES32=0x0, @ANYRES64=r4], 0x20) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="43877060", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) (async)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001a000000000000000095"], &(0x7f0000004780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)="e892d09d976a79e713ff508ffb7dc1b13d2314a5c2bc00d7"}, 0x50) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ff843500180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000ede4c66c9f7e2302c8229fe260356915a5fb3b0e0000000e6f7d8ebeb9a95a12f10071e1228b64e95ffd2b037997589b85f733051fc5d3dcce1b1a8e728fe48d2059f95f491325fc4264898c10fb581c4b9532329887155d53d51c02d42368daf94b17a90578b471d6fc84eab01d7c195e2fc076ea6f974338ee472f91ff567ee16d747220be19ebba7650f23b66d4372f68cfa9fe04391505fe96099a92a1e50531785b4b66be2c1ccb5597f256e62f532f8778528237202b50118ae080b79cc6f66cae612dc3aa37ae2aa05fd08e221abb26b214c9da54eb63f3a88481745b39c4b5124701a17a10e9cd"], 0x0) (async)

4.26923205s ago: executing program 4 (id=2278):
socket$netlink(0x10, 0x3, 0x0)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = syz_open_dev$vivid(&(0x7f00000002c0), 0x2, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x40088, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x300048c1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000340)={0x80, 0x9, 0x0, "5c1e860a2d6a9d1b8055aa62c5b169f5ecabc3f085b84adabb01381615538442", 0x39565559})
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
clock_gettime(0x6, &(0x7f0000000080)={<r8=>0x0, <r9=>0x0})
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r8, r9+60000000}}, 0x0)

3.305947118s ago: executing program 6 (id=2279):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x28, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f00000000c0)="f30fa90fa8d163000f9bae598f0f01c2f3ad6d66b9800000c00f326635010000000f3065819af9007a9dbaf80c66b80cee7c8366efbafc0c66ed", 0x3a}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40345410, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r9, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x24}}, 0x0)

3.24304429s ago: executing program 2 (id=2280):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$MSR(&(0x7f0000000080), 0x264000000000, 0x0)
unshare(0x480)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r0, @ANYBLOB="0c0099"], 0x64}}, 0x0)

3.242582778s ago: executing program 8 (id=2281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010048000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

3.113984022s ago: executing program 0 (id=2282):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r0=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x1]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}}, {@multicast2}, {@private=0xa010104}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x30, r3, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) (async)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, r5, 0x0, 0x0, 0x0, 0x4, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r1, @ANYRES8=r5, @ANYRESHEX=r1, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6, 0x0, 0x1200}, 0x10)
r7 = socket$inet6(0xa, 0x3, 0x4)
sendmmsg$inet6(r7, &(0x7f0000000180), 0x0, 0x85) (async)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) (async)
r9 = dup(r8) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) (async)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
shutdown(r9, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r11, 0xae9a) (async)
ioctl$KVM_RUN(r11, 0xae80, 0x0) (async)
write$UHID_CREATE2(r9, &(0x7f0000000940)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xf9, 0xfc00, 0x2, 0x4, 0x3, 0x1, "6f8130764c8c89f7ec70ee1abc83bc07d869ac9d69b6a20ce428348e46c3606d72748765cbaeecfb8b415c497c018aeea3b8467b6af18a3af9d39ecc3a950feeb8d9b7b29916b87519ed8a889b23ee413501dd9ba9b4f3e70dbab22de6a17f0f51d6095c2ba16033da649056eee9bae9f9ae53904ffede4cdca41d585ef263bf1eaa0ab29efd3168cd0110a24e371d85e94d2acf203ee565712b82d08a183cd695de00286a420a41ed4e70a2bf667595f5238e7f87ad24f44bd09cf6db59452ed60597891dbd8e34858bdc96d4b43fde046c41b93324b9b960301e27419d3c90ec206886b43a9988181d2846ffd60f3f35c0ac11fe7d530373"}}, 0x211) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9f00800000000000000000001800000018040000020000000000000000000802020000000d00000000000010080000000000"], &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28)

1.813662069s ago: executing program 2 (id=2283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0}) (rerun: 32)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async)
pipe2$9p(&(0x7f00000000c0), 0x0) (async)
r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r12 = eventfd(0x0)
r13 = eventfd2(0x6, 0x800)
ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000000)={r12, 0x7, 0x3, r13})

1.506821136s ago: executing program 2 (id=2284):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x2}, &(0x7f0000000240)) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async)
recvmmsg(r6, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000001880)=""/22, 0x16}, {&(0x7f00000018c0)=""/174, 0xae}], 0x7}, 0x60}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x42, 0x0)
fcntl$setpipe(r6, 0x407, 0x6) (async, rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (rerun: 32)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000480)={0x1b, 0x1, 0x0, "43e191a176f79697a7746cf24b0f1367a7b9e58729635fc4ea66a59a0cd611a6", 0x3136564e}) (async, rerun: 32)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0) (rerun: 32)
write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r10 = dup(r9)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138)
ioctl$VIDIOC_SUBDEV_G_EDID(r10, 0xc0285628, &(0x7f0000000040)={0x0, 0x79, 0x8}) (async, rerun: 64)
syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x50, 0x0, 0x0, [{0x1, 0xdfc, 0x1, 0x4, '['}, {0x3, 0x8, 0x2, 0xff, 'fd'}]}, 0x0, 0x0, 0x0, 0x0}) (async)
getdents(r7, &(0x7f0000000700)=""/90, 0x5a)

1.142178573s ago: executing program 2 (id=2285):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa2902) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) (async)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
socket(0x10, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="130000000800000008"], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000008})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
timer_create(0x2, 0x0, &(0x7f0000000000))
syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaedf, 0x0, 0xffffffff, 0x25d}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x8041, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8}, 0x57)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.013742199s ago: executing program 6 (id=2286):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

0s ago: executing program 8 (id=2287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x0)

kernel console output (not intermixed with test programs):

get: couldn't find an available UDC or it's busy
[  732.259792][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.259920][ T8527] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  732.417745][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.436103][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.683479][ T8527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  732.739467][ T5868] usb 2-1: USB disconnect, device number 82
[  732.779812][ T8527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  732.822160][ T8527] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  732.865751][ T8527] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  732.890634][ T8527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.943707][ T8527] usb 9-1: config 0 descriptor??
[  734.263696][ T8527] usbhid 9-1:0.0: can't add hid device: -71
[  734.270168][ T8527] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  734.450272][ T8527] usb 9-1: USB disconnect, device number 37
[  734.721293][T13942] overlay: filesystem on ./bus not supported as upperdir
[  735.449496][ T8527] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  735.876892][ T5868] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  735.929988][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  735.936481][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  736.877005][ T8527] usb 9-1: device descriptor read/all, error -71
[  736.887398][ T5868] usb 3-1: Using ep0 maxpacket: 8
[  736.898363][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  736.953937][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  736.991907][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  737.019000][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  737.059738][ T5868] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  737.091788][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.097867][ T5902] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[  737.109397][ T5868] usb 3-1: config 0 descriptor??
[  737.154914][ T5869] usb 2-1: new full-speed USB device number 83 using dummy_hcd
[  737.413674][ T5902] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  737.422179][ T5902] usb 7-1: config 0 has no interface number 0
[  737.428684][ T5902] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  737.439693][ T5902] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  737.451444][ T5902] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  737.462750][ T5902] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  737.474275][ T5902] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  737.487459][ T5902] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  737.496733][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.514801][ T5902] usb 7-1: config 0 descriptor??
[  737.522640][T13954] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  737.534130][ T5902] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  737.544910][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short
[  737.553381][ T5869] usb 2-1: not running at top speed; connect to a high speed hub
[  737.562753][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.579966][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  737.592784][ T5868] kye 0003:0458:0087.0018: report_id 0 is invalid
[  737.600174][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.623586][ T5869] usb 2-1: Product: syz
[  737.627930][ T5869] usb 2-1: Manufacturer: syz
[  737.644616][ T5869] usb 2-1: SerialNumber: syz
[  737.646125][ T5868] kye 0003:0458:0087.0018: item 0 1 1 8 parsing failed
[  737.659323][ T5868] kye 0003:0458:0087.0018: parse failed
[  737.670359][ T5868] kye 0003:0458:0087.0018: probe with driver kye failed with error -22
[  737.672924][ T5869] usb 2-1: bad CDC descriptors
[  737.797943][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.841791][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.911055][ T8527] usb 2-1: USB disconnect, device number 83
[  737.915616][ T5868] usb 3-1: USB disconnect, device number 38
[  738.041855][    T9] usb 7-1: USB disconnect, device number 46
[  738.058757][    T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  738.436683][T14011] netlink: 'syz.2.1629': attribute type 1 has an invalid length.
[  738.474319][T14011] netlink: 'syz.2.1629': attribute type 2 has an invalid length.
[  738.488888][    T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  738.834782][T14014] 9pnet: p9_errstr2errno: server reported unknown error �����sł�m���6�'�t�T	�#
[  739.097904][ T5869] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  739.214557][    T9] usb 7-1: Using ep0 maxpacket: 32
[  739.221762][    T9] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  739.231104][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.262908][    T9] usb 7-1: config 0 descriptor??
[  739.296950][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  739.647093][T14029] netlink: zone id is out of range
[  739.746763][    T9] gspca_vc032x: reg_r err -71
[  739.776066][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.812251][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.817896][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.857197][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.869888][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.881054][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.898242][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.903608][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  739.933873][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  740.383848][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  740.580817][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  740.613919][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  740.626660][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  740.647757][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  741.102333][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  741.187035][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  741.200063][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  741.207926][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  741.220161][    T9] gspca_vc032x: Unknown sensor...
[  741.239216][    T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -22
[  741.280802][    T9] usb 7-1: USB disconnect, device number 47
[  742.566372][ T5869] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  742.742560][ T5869] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  742.756815][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.783969][ T5869] usb 3-1: config 0 descriptor??
[  742.802263][ T5869] cp210x 3-1:0.0: cp210x converter detected
[  743.254823][T14097] netlink: zone id is out of range
[  744.439629][    T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  744.701448][    T9] usb 2-1: Using ep0 maxpacket: 16
[  744.761469][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  744.916272][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  745.033419][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  745.115694][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.148454][    T9] usb 2-1: config 0 descriptor??
[  745.182329][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  745.212791][ T5869] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  745.222710][ T5869] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  745.239771][ T5869] usb 3-1: cp210x converter now attached to ttyUSB0
[  745.273102][ T5869] usb 3-1: USB disconnect, device number 40
[  745.304783][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  745.325067][ T5869] cp210x 3-1:0.0: device disconnected
[  745.392666][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'.
[  746.406942][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'.
[  746.415893][T14137] netlink: 'syz.1.1651': attribute type 14 has an invalid length.
[  746.435823][T14137] netlink: 'syz.1.1651': attribute type 13 has an invalid length.
[  746.588098][    T9] usb 2-1: USB disconnect, device number 84
[  747.076763][T14169] tipc: Trying to set illegal importance in message
[  748.268603][ T5869] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  748.348964][T14170] netlink: zone id is out of range
[  748.929556][T14175] can0: slcan on ttyS3.
[  749.050995][T14184] vlan2: entered promiscuous mode
[  749.066643][T14174] can0 (unregistered): slcan off ttyS3.
[  749.075351][T14184] vlan2: entered allmulticast mode
[  749.080534][T14184] hsr_slave_1: entered allmulticast mode
[  749.113257][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1662'.
[  749.270939][    T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  749.295868][T14196] 9pnet_fd: Insufficient options for proto=fd
[  749.390407][T14184] hsr_slave_1 (unregistering): left allmulticast mode
[  749.432578][    T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  749.449730][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.474974][    T9] usb 7-1: Product: syz
[  749.483744][T14184] hsr_slave_1 (unregistering): left promiscuous mode
[  749.502013][    T9] usb 7-1: Manufacturer: syz
[  749.519052][    T9] usb 7-1: SerialNumber: syz
[  749.558662][    T9] usb 7-1: config 0 descriptor??
[  749.769489][    T9] hso 7-1:0.0: Failed to find BULK IN ep
[  749.788106][    T9] usb-storage 7-1:0.0: USB Mass Storage device detected
[  749.832564][T14209] binder: BINDER_SET_CONTEXT_MGR already set
[  749.875986][T14209] binder: 14207:14209 ioctl 4018620d 20000100 returned -16
[  749.962368][    T9] usb 7-1: USB disconnect, device number 48
[  750.084966][ T5869] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  750.228394][ T5869] usb 2-1: Using ep0 maxpacket: 16
[  750.239609][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  750.287605][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  750.319954][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  750.340092][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.379348][ T5869] usb 2-1: config 0 descriptor??
[  750.742673][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  751.257209][    T9] usb 3-1: Using ep0 maxpacket: 16
[  751.291569][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  751.592394][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.602628][T14239] QAT: Stopping all acceleration devices.
[  751.657943][    T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  751.717403][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.785138][    T9] usb 3-1: config 0 descriptor??
[  752.037102][    T9] hid-steam 0003:28DE:1102.0019: unknown main item tag 0x0
[  752.112856][    T9] hid-steam 0003:28DE:1102.0019: unknown main item tag 0x0
[  752.156014][T14255] tipc: Started in network mode
[  752.172911][    T9] hid-steam 0003:28DE:1102.0019: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  752.204167][T14255] tipc: Node identity 1, cluster identity 4711
[  752.236187][T14255] tipc: Node number set to 1
[  752.328643][    T9] hid-steam 0003:28DE:1102.0019: Steam Controller 'XXXXXXXXXX' connected
[  752.390292][    T9] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0019/input/input89
[  752.509391][    T9] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x0
[  752.572262][    T9] hid-steam 0003:28DE:1102.001A: unknown main item tag 0x0
[  752.658246][    T9] hid-steam 0003:28DE:1102.001A: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  753.220129][ T5905] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  753.248227][ T5869] logitech 0003:046D:CA03.001B: item fetching failed at offset 0/5
[  753.256964][ T5869] logitech 0003:046D:CA03.001B: parse failed
[  753.263234][ T5869] logitech 0003:046D:CA03.001B: probe with driver logitech failed with error -22
[  753.275170][ T5869] usb 2-1: USB disconnect, device number 85
[  753.497047][    T9] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  753.696648][    T9] usb 9-1: Using ep0 maxpacket: 8
[  753.713320][    T9] usb 9-1: config 0 has an invalid interface number: 38 but max is 0
[  753.740105][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  753.756045][    T9] usb 9-1: config 0 has no interface number 0
[  753.777903][    T9] usb 9-1: config 0 interface 38 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32
[  753.806005][    T9] usb 9-1: config 0 interface 38 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  753.830128][    T9] usb 9-1: config 0 interface 38 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  753.868150][    T9] usb 9-1: config 0 interface 38 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7
[  753.923431][    T9] usb 9-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=4b.63
[  753.955355][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.986408][    T9] usb 9-1: Product: syz
[  754.004540][    T9] usb 9-1: Manufacturer: syz
[  754.019873][    T9] usb 9-1: SerialNumber: syz
[  754.054202][    T9] usb 9-1: config 0 descriptor??
[  754.082720][T14271] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  754.112990][    T9] pn533_usb 9-1:0.38: NFC: Could not find bulk-in or bulk-out endpoint
[  754.219861][ T8527] usb 3-1: USB disconnect, device number 42
[  754.393509][ T8527] hid-steam 0003:28DE:1102.0019: Steam Controller 'XXXXXXXXXX' disconnected
[  754.724214][    T9] usb 9-1: USB disconnect, device number 40
[  755.202647][ T5869] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  755.373611][ T5869] usb 2-1: Using ep0 maxpacket: 8
[  755.395675][ T5869] usb 2-1: too many configurations: 249, using maximum allowed: 8
[  755.432264][ T5869] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff
[  755.449131][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  755.459079][ T5869] usb 2-1: Product: syz
[  755.587979][ T5869] usb 2-1: Manufacturer: syz
[  755.592986][ T5869] usb 2-1: SerialNumber: syz
[  755.620033][ T5869] usb 2-1: config 0 descriptor??
[  755.829496][ T5869] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration
[  756.033354][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.079431][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.089541][ T8527] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  756.120128][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.135426][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.193376][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.202324][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.274824][ T8527] usb 9-1: Using ep0 maxpacket: 8
[  756.283956][ T8527] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  756.311803][ T8527] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  756.352513][ T8527] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  756.369664][ T5902] usb 2-1: USB disconnect, device number 86
[  756.389377][ T8527] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  756.398835][ T8527] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.408465][ T8527] usb 9-1: Product: syz
[  756.439503][ T8527] usb 9-1: Manufacturer: syz
[  756.455416][ T8527] usb 9-1: SerialNumber: syz
[  756.564863][ T5905] usb 7-1: device descriptor read/64, error -71
[  756.793702][ T5905] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  756.826505][T14315] Process accounting resumed
[  757.013096][ T5905] usb 7-1: Using ep0 maxpacket: 16
[  757.025304][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.051115][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  757.079126][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  757.142510][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  757.169567][ T8527] usb 9-1: 0:2 : does not exist
[  757.191362][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  757.207713][ T5905] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  757.217188][ T5905] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  757.258518][ T5905] usb 7-1: Manufacturer: syz
[  757.270465][ T8527] usb 9-1: USB disconnect, device number 41
[  757.294835][ T5905] usb 7-1: config 0 descriptor??
[  757.306889][T14370] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  757.314610][T14370] overlayfs: failed to set xattr on upper
[  757.321042][T14370] overlayfs: ...falling back to redirect_dir=nofollow.
[  757.596531][ T5905] rc_core: IR keymap rc-hauppauge not found
[  757.602510][ T5905] Registered IR keymap rc-empty
[  757.658062][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  757.696422][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.707697][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  757.727707][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.748070][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  757.760868][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.780561][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input90
[  757.793153][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.824747][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  757.913185][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  757.956753][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.009064][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.077994][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.088565][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.103873][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  758.114909][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.165726][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.235373][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.250781][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  758.312885][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.403918][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.442133][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.488744][ T5905] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  758.539833][ T5905] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  758.555892][ T5905] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  758.586145][ T5905] usb 7-1: USB disconnect, device number 50
[  759.052537][T14425] loop2: detected capacity change from 0 to 1
[  759.104650][T14425] Dev loop2: unable to read RDB block 1
[  759.115472][T14425]  loop2: unable to read partition table
[  759.140957][T14425] loop2: partition table beyond EOD, truncated
[  759.153502][T14425] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  759.917761][T14425] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1701'.
[  760.149786][ T8527] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  760.794013][T14451] serio: Serial port ptm0
[  760.820983][T14453] netlink: 'syz.8.1706': attribute type 3 has an invalid length.
[  760.861594][T14453] netlink: 'syz.8.1706': attribute type 3 has an invalid length.
[  761.018230][T14457] bridge_slave_0: left allmulticast mode
[  761.109172][T14457] bridge_slave_0: left promiscuous mode
[  761.161029][T14457] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.394722][T14457] bridge_slave_1: left allmulticast mode
[  761.468899][T14457] bridge_slave_1: left promiscuous mode
[  761.556288][T14457] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.643228][T14457] bond0: (slave bond_slave_1): Releasing backup interface
[  761.820316][T14457] team0: Port device team_slave_0 removed
[  761.853750][ T8527] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  761.871120][T14457] team0: Port device team_slave_1 removed
[  761.903072][T14457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.930059][T14457] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.953309][T14457] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.977601][ T8527] usb 7-1: device descriptor read/64, error -71
[  761.978041][T14457] batman_adv: batadv0: Removing interface: batadv_slave_1
[  762.216024][ T8527] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  762.387520][ T8527] usb 7-1: device descriptor read/64, error -71
[  762.492577][ T8527] usb usb7-port1: attempt power cycle
[  762.504319][T14488] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  762.531874][T14488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  762.559310][ T5902] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  762.921243][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  762.928554][ T5902] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  762.939954][ T5902] usb 3-1: config 0 has no interface number 0
[  762.949708][ T8527] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  762.970680][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  762.983760][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.994199][ T8527] usb 7-1: device descriptor read/8, error -71
[  763.001285][ T5902] usb 3-1: Product: syz
[  763.005570][ T5902] usb 3-1: Manufacturer: syz
[  763.010565][ T5902] usb 3-1: SerialNumber: syz
[  763.024885][ T5902] usb 3-1: config 0 descriptor??
[  763.944950][    T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  764.020792][ T5902] smsc95xx v2.0.0
[  764.102551][ T8527] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  764.115927][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  764.125819][ T8527] usb 7-1: device descriptor read/8, error -71
[  764.164774][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.174784][    T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  764.184020][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.199580][    T9] usb 2-1: config 0 descriptor??
[  764.237336][ T8527] usb usb7-port1: unable to enumerate USB device
[  764.569432][T10604] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[  764.702737][T10604] usb 9-1: device descriptor read/64, error -71
[  764.941553][T10604] usb 9-1: new full-speed USB device number 43 using dummy_hcd
[  765.075471][T10604] usb 9-1: device descriptor read/64, error -71
[  765.143575][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  765.154627][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  765.166116][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  765.189285][ T5902] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  765.208262][T10604] usb usb9-port1: attempt power cycle
[  765.232723][ T5902] usb 3-1: USB disconnect, device number 43
[  765.598501][T10604] usb 9-1: new full-speed USB device number 44 using dummy_hcd
[  765.645822][T10604] usb 9-1: device descriptor read/8, error -71
[  765.904005][T10604] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[  765.924212][T10604] usb 9-1: device descriptor read/8, error -71
[  766.019487][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  766.039314][T10604] usb usb9-port1: unable to enumerate USB device
[  766.066001][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  766.096531][    T9] usb 2-1: USB disconnect, device number 87
[  766.543883][ T5902] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[  766.734327][ T5902] usb 2-1: config 4 has an invalid interface number: 231 but max is 0
[  766.756854][ T5902] usb 2-1: config 4 has no interface number 0
[  766.784853][ T5902] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  766.817254][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.845827][ T5902] usb 2-1: Product: syz
[  766.850315][ T5902] usb 2-1: Manufacturer: syz
[  766.854967][ T5902] usb 2-1: SerialNumber: syz
[  766.891972][ T5902] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  767.285480][ T5902] vp7045: USB control message 'in' went wrong.
[  767.295455][    T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  767.304317][ T5902] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  767.339760][ T5902] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  767.376301][ T5902] usb 2-1: USB disconnect, device number 88
[  767.475921][    T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  767.503783][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.521470][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.538985][    T8] usb 3-1: Product: syz
[  767.545868][    T8] usb 3-1: Manufacturer: syz
[  767.550527][    T8] usb 3-1: SerialNumber: syz
[  767.562789][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.577939][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.586576][    T8] usb 3-1: config 0 descriptor??
[  767.622056][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.752198][  T974] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  767.904868][  T974] usb 9-1: device descriptor read/64, error -71
[  767.937122][T14612] overlayfs: failed to set uuid (263/file1, err=-1); falling back to uuid=null.
[  767.947669][T14612] overlayfs: failed to verify upper root origin
[  768.171929][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.181222][  T974] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  768.207390][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.410487][  T974] usb 9-1: device descriptor read/64, error -71
[  768.524550][  T974] usb usb9-port1: attempt power cycle
[  768.577678][    T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  768.590481][    T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  768.644130][    T8] asix 3-1:0.0: probe with driver asix failed with error -71
[  768.693802][    T8] usb 3-1: USB disconnect, device number 44
[  769.515133][  T974] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  769.553703][  T974] usb 9-1: device descriptor read/8, error -71
[  769.811885][  T974] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  769.840899][  T974] usb 9-1: device descriptor read/8, error -71
[  769.877517][    T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  769.955113][  T974] usb usb9-port1: unable to enumerate USB device
[  770.031911][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  770.082723][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  770.115625][ T5902] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  770.117545][    T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  770.157948][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  770.185028][    T8] usb 3-1: SerialNumber: syz
[  770.280223][ T5902] usb 2-1: Using ep0 maxpacket: 16
[  770.301930][ T5902] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  770.312951][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  770.324909][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'.
[  770.340374][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  770.361650][ T5902] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  770.388169][    T8] usb 3-1: 0:2 : does not exist
[  770.388520][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.425177][ T5902] usb 2-1: Product: syz
[  770.438195][ T5902] usb 2-1: Manufacturer: syz
[  770.448120][ T5902] usb 2-1: SerialNumber: syz
[  770.453848][    T8] usb 3-1: USB disconnect, device number 45
[  770.846561][ T5902] usb 2-1: 0:2 : does not exist
[  770.871891][ T5902] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  770.879067][  T974] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[  770.906948][ T5902] usb 2-1: USB disconnect, device number 89
[  770.975177][T14687] FAULT_INJECTION: forcing a failure.
[  770.975177][T14687] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  771.011960][T14687] CPU: 0 UID: 0 PID: 14687 Comm: syz.6.1748 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  771.022806][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  771.032895][T14687] Call Trace:
[  771.036199][T14687]  <TASK>
[  771.039172][T14687]  dump_stack_lvl+0x241/0x360
[  771.043919][T14687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  771.049183][T14687]  ? __pfx__printk+0x10/0x10
[  771.053846][T14687]  should_fail_ex+0x3b0/0x4e0
[  771.058583][T14687]  strncpy_from_user+0x36/0x270
[  771.063519][T14687]  getname_flags+0xf1/0x540
[  771.068081][T14687]  do_sys_openat2+0xd2/0x1d0
[  771.072728][T14687]  ? __pfx_do_sys_openat2+0x10/0x10
[  771.078041][T14687]  ? __fget_files+0x2a/0x410
[  771.082712][T14687]  ? __fget_files+0x2a/0x410
[  771.087359][T14687]  __x64_sys_openat+0x247/0x2a0
[  771.092263][T14687]  ? __pfx___x64_sys_openat+0x10/0x10
[  771.097698][T14687]  ? do_syscall_64+0x100/0x230
[  771.102531][T14687]  ? do_syscall_64+0xb6/0x230
[  771.107282][T14687]  do_syscall_64+0xf3/0x230
[  771.111865][T14687]  ? clear_bhb_loop+0x35/0x90
[  771.116594][T14687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.122557][T14687] RIP: 0033:0x7fa1a0f85d29
[  771.127035][T14687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.146699][T14687] RSP: 002b:00007fa1a1e1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  771.155189][T14687] RAX: ffffffffffffffda RBX: 00007fa1a1175fa0 RCX: 00007fa1a0f85d29
[  771.163216][T14687] RDX: 000000000000275a RSI: 0000000020000100 RDI: ffffffffffffff9c
[  771.171240][T14687] RBP: 00007fa1a1e1d090 R08: 0000000000000000 R09: 0000000000000000
[  771.179274][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.187310][T14687] R13: 0000000000000000 R14: 00007fa1a1175fa0 R15: 00007fff668625e8
[  771.195350][T14687]  </TASK>
[  771.245451][  T974] usb 9-1: Using ep0 maxpacket: 16
[  771.297079][  T974] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  771.305519][  T974] usb 9-1: config 0 has no interface number 0
[  771.349027][  T974] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  771.378518][  T974] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  771.440168][  T974] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  771.468814][  T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  771.489608][  T974] usb 9-1: config 0 descriptor??
[  771.925900][    T8] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  772.088408][    T8] usb 2-1: Using ep0 maxpacket: 16
[  772.099006][  T974] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.001D/input/input91
[  772.112579][    T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  772.125014][    T8] usb 2-1: config 1 has no interface number 1
[  772.146433][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  772.169395][    T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  772.291028][  T974] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.001D/input/input92
[  772.411766][  T974] uclogic 0003:28BD:0071.001D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1
[  772.436680][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  772.497156][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.545072][  T974] usb 9-1: USB disconnect, device number 50
[  772.573291][    T8] usb 2-1: Product: syz
[  772.613280][    T8] usb 2-1: Manufacturer: syz
[  772.664039][    T8] usb 2-1: SerialNumber: syz
[  772.918962][    T8] usb 2-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  772.966874][    T8] usb 2-1: found format II with max.bitrate = 0, frame size=0
[  773.013536][T10604] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  773.027883][    T8] usb 2-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  773.076808][    T8] usb 2-1: found format II with max.bitrate = 0, frame size=0
[  773.118574][    T8] usb 2-1: failed to enable PITCH for EP 0x82
[  773.196277][    T8] usb 2-1: USB disconnect, device number 90
[  773.222436][T10604] usb 7-1: Using ep0 maxpacket: 32
[  773.243009][T10604] usb 7-1: config index 0 descriptor too short (expected 16420, got 36)
[  773.308463][T10604] usb 7-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config
[  773.379157][T10604] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  773.469888][T10604] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  773.546547][T10604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.614962][T10604] usb 7-1: config 0 descriptor??
[  773.973824][T10604] usb 7-1: string descriptor 0 read error: -32
[  773.999315][T10604] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  774.232938][    T8] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  774.405816][    T8] usb 9-1: unable to get BOS descriptor or descriptor too short
[  774.420197][    T8] usb 9-1: config 3 has an invalid interface number: 101 but max is 0
[  774.429312][    T8] usb 9-1: config 3 has no interface number 0
[  774.438256][    T8] usb 9-1: config 3 interface 101 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 32
[  774.448983][T14766] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  774.463305][    T8] usb 9-1: config 3 interface 101 altsetting 9 bulk endpoint 0xC has invalid maxpacket 64
[  774.490562][    T8] usb 9-1: config 3 interface 101 has no altsetting 0
[  774.520107][    T8] usb 9-1: string descriptor 0 read error: -22
[  774.526427][    T8] usb 9-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=6f.3a
[  774.545934][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.568881][T14772] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  774.579237][T14772] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  774.610120][    T8] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  774.658750][    T8] snd-usb-audio 9-1:3.101: probe with driver snd-usb-audio failed with error -2
[  774.821502][T14772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.852014][T14772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.882233][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  774.893297][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'.
[  774.907275][T14805] bridge0: entered promiscuous mode
[  774.935722][ T5869] usb 9-1: USB disconnect, device number 51
[  775.698789][ T5869] usb 7-1: USB disconnect, device number 55
[  775.948748][ T5822] Bluetooth: hci0: command 0x0406 tx timeout
[  776.109369][ T5869] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  776.192495][T14858] delete_channel: no stack
[  776.433831][ T5869] usb 7-1: Using ep0 maxpacket: 16
[  776.466645][ T5869] usb 7-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config
[  776.483182][ T5869] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  776.504523][ T5869] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  776.539280][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.512408][ T5869] usb 7-1: Product: syz
[  777.517179][ T5869] usb 7-1: Manufacturer: syz
[  777.522143][ T5869] usb 7-1: SerialNumber: syz
[  777.526359][T14857] delete_channel: no stack
[  778.915567][ T5869] usb 7-1: 0:2 : does not exist
[  778.925881][ T5869] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  778.995663][   T29] audit: type=1326 audit(1736156511.130:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  779.010849][ T5869] usb 7-1: USB disconnect, device number 56
[  779.065578][T14882] netlink: 'syz.2.1781': attribute type 12 has an invalid length.
[  779.101995][   T29] audit: type=1326 audit(1736156511.162:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  779.185119][   T29] audit: type=1326 audit(1736156511.162:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  779.242367][   T29] audit: type=1326 audit(1736156511.204:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  779.319880][   T29] audit: type=1326 audit(1736156511.214:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  779.322255][T14892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.359624][    T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  779.367508][   T29] audit: type=1326 audit(1736156511.214:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64eed7cce7 code=0x7ffc0000
[  779.438891][T14892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.461093][   T29] audit: type=1326 audit(1736156511.214:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64eed21f29 code=0x7ffc0000
[  779.505898][T14509] kernel write not supported for file /1013/setgroups (pid: 14509 comm: kworker/1:1)
[  779.520810][ T5869] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  779.615593][   T29] audit: type=1326 audit(1736156511.214:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  779.773913][   T29] audit: type=1326 audit(1736156511.214:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64eed7cce7 code=0x7ffc0000
[  779.873078][   T29] audit: type=1326 audit(1736156511.214:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64eed21f29 code=0x7ffc0000
[  780.301409][T14918] 9pnet_fd: p9_fd_create_unix (14918): problem connecting socket: ./file0: -111
[  781.259138][T14924] syz.8.1790 (14924): drop_caches: 2
[  781.997109][T14970] kvm: kvm [14969]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  782.021011][T14970] kvm: kvm [14969]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  784.364591][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1795'.
[  786.708326][T14911] bond0: (slave bond_slave_0): Releasing backup interface
[  786.735445][T14911] bond0: (slave bond_slave_1): Releasing backup interface
[  786.786053][T14911] team0: Port device team_slave_0 removed
[  786.812731][T14911] team0: Port device team_slave_1 removed
[  786.819317][T14911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  786.826998][T14911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  786.843892][T14911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  786.846941][T14991] input: syz1 as /devices/virtual/input/input93
[  786.851455][T14911] batman_adv: batadv0: Removing interface: batadv_slave_1
[  786.950096][T14982] tipc: Failed to obtain node identity
[  786.955867][T14982] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  787.300612][T14999] overlayfs: statfs failed on './file0'
[  787.602097][ T5902] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  787.757106][ T5902] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  787.769152][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.782870][ T5902] usb 9-1: config 0 descriptor??
[  787.794106][ T5902] gspca_main: spca508-2.14.0 probing 8086:0110
[  787.991262][ T5902] gspca_spca508: reg_read err -32
[  788.417500][T15054] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  788.417500][T15054]    program syz.2.1806 not setting count and/or reply_len properly
[  788.465610][T15054] loop2: detected capacity change from 0 to 7
[  788.480128][ T5902] gspca_spca508: reg_read err -110
[  788.496412][ T5902] gspca_spca508: reg_read err -32
[  788.574597][T15054] Dev loop2: unable to read RDB block 7
[  788.580640][T15054]  loop2: unable to read partition table
[  788.587671][T15054] loop2: partition table beyond EOD, truncated
[  788.594197][T15054] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  788.944881][ T5902] gspca_spca508: reg_read err -32
[  788.993210][ T5902] gspca_spca508: reg write: error -32
[  789.060017][ T5902] spca508 9-1:0.0: probe with driver spca508 failed with error -32
[  789.115739][ T5902] usb 9-1: USB disconnect, device number 53
[  789.180372][T15058] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  789.234395][T15061] netlink: 'syz.8.1809': attribute type 27 has an invalid length.
[  789.269267][T15061] netlink: 'syz.8.1809': attribute type 3 has an invalid length.
[  789.279509][T15061] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1809'.
[  789.641555][  T974] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  789.803288][  T974] usb 2-1: Using ep0 maxpacket: 32
[  789.816571][  T974] usb 2-1: unable to get BOS descriptor or descriptor too short
[  789.838589][  T974] usb 2-1: config 7 has an invalid interface number: 187 but max is 0
[  789.857356][  T974] usb 2-1: config 7 has no interface number 0
[  789.867215][  T974] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  789.898867][  T974] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  789.915218][  T974] usb 2-1: config 7 interface 187 has no altsetting 0
[  789.949638][  T974] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  789.965112][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.983664][  T974] usb 2-1: Product: syz
[  789.988772][  T974] usb 2-1: Manufacturer: syz
[  789.993429][  T974] usb 2-1: SerialNumber: syz
[  790.010978][T15070] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  790.026771][T15070] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  790.250861][  T974] usb 2-1: Limiting number of CPorts to U8_MAX
[  790.275313][  T974] usb 2-1: Unused bulk OUT endpoint found: 0x03
[  790.291667][  T974] usb 2-1: Not enough endpoints found in device, aborting!
[  790.542734][T15129] netlink: zone id is out of range
[  791.143893][  T974] usb 2-1: USB disconnect, device number 91
[  791.467274][T15139] netlink: 'syz.0.1823': attribute type 11 has an invalid length.
[  791.517515][T15139] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1823'.
[  792.210160][  T974] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  792.218013][    T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  792.387058][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  792.398305][    T8] usb 3-1: Using ep0 maxpacket: 16
[  792.414286][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  792.433304][  T974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  792.448801][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  792.466599][  T974] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  792.480608][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  792.505312][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.518897][    T8] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  792.534071][  T974] usb 2-1: config 0 descriptor??
[  792.564418][    T8] usb 3-1: config 1 interface 0 has no altsetting 0
[  792.591712][    T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40
[  792.610987][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.632958][    T8] usb 3-1: Product: syz
[  792.643876][    T8] usb 3-1: Manufacturer: syz
[  792.658716][    T8] usb 3-1: SerialNumber: syz
[  792.931932][    T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input95
[  792.945807][  T974] elecom 0003:056E:010C.001E: unknown main item tag 0x1
[  792.972905][  T974] elecom 0003:056E:010C.001E: item fetching failed at offset 24/41
[  793.010559][ T5182] bcm5974 3-1:1.0: could not read from device
[  793.032355][  T974] elecom 0003:056E:010C.001E: probe with driver elecom failed with error -22
[  793.051353][    T8] usb 3-1: USB disconnect, device number 47
[  793.059783][ T5182] bcm5974 3-1:1.0: could not read from device
[  793.147269][  T974] usb 2-1: USB disconnect, device number 92
[  793.439273][T15201] Cannot find del_set index 0 as target
[  793.681339][  T974] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  793.834265][  T974] usb 9-1: Using ep0 maxpacket: 16
[  793.856861][  T974] usb 9-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59
[  793.896291][  T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.922041][  T974] usb 9-1: Product: syz
[  793.927146][  T974] usb 9-1: Manufacturer: syz
[  793.935360][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  793.935415][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  794.876427][  T974] usb 9-1: SerialNumber: syz
[  794.883249][  T974] usb 9-1: config 0 descriptor??
[  794.893397][  T974] pwc: Logitech QuickCam 4000 Pro USB webcam detected.
[  795.037549][T15169] block nbd0: shutting down sockets
[  795.102786][  T974] pwc: Failed to set LED on/off time (-71)
[  795.124486][  T974] pwc: send_video_command error -71
[  795.129761][  T974] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  796.108216][  T974] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71
[  796.119787][  T974] usb 9-1: USB disconnect, device number 54
[  799.559762][T15260] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1838'.
[  800.270722][T15272] block nbd2: shutting down sockets
[  804.122011][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'.
[  805.278609][T14509] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  805.440343][T14509] usb 9-1: device descriptor read/64, error -71
[  805.669127][T14509] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  805.841399][T14509] usb 9-1: device descriptor read/64, error -71
[  805.947263][T14509] usb usb9-port1: attempt power cycle
[  806.307932][T14509] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  806.435896][T14509] usb 9-1: device descriptor read/8, error -71
[  806.701841][T14509] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  807.067140][T14509] usb 9-1: device descriptor read/8, error -71
[  807.085594][T15394] netlink: 8365 bytes leftover after parsing attributes in process `syz.0.1861'.
[  807.115369][T15394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.175357][T14509] usb usb9-port1: unable to enumerate USB device
[  807.595115][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  807.595136][   T29] audit: type=1326 audit(1736156541.038:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  807.647416][   T29] audit: type=1326 audit(1736156541.038:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  807.709911][   T29] audit: type=1326 audit(1736156541.038:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  807.786210][   T29] audit: type=1326 audit(1736156541.038:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  807.813284][    T9] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  807.857784][   T29] audit: type=1326 audit(1736156541.038:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  807.892416][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  807.939830][   T29] audit: type=1326 audit(1736156541.038:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  808.013262][   T29] audit: type=1326 audit(1736156541.038:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  808.057913][    T9] usb 3-1: config 0 has an invalid interface number: 140 but max is 0
[  808.074777][    T9] usb 3-1: config 0 has no interface number 0
[  808.103911][   T29] audit: type=1326 audit(1736156541.038:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  808.222946][   T29] audit: type=1326 audit(1736156541.038:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  808.273430][   T29] audit: type=1326 audit(1736156541.038:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.2.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64eed85d29 code=0x7ffc0000
[  808.312383][    T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01
[  808.326348][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.364966][    T9] usb 3-1: Product: syz
[  808.386716][    T9] usb 3-1: Manufacturer: syz
[  808.423000][    T9] usb 3-1: SerialNumber: syz
[  808.451231][    T9] usb 3-1: config 0 descriptor??
[  810.061602][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  810.083799][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  810.154467][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  810.192431][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  810.208513][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  810.216235][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  810.371713][    T9] as10x_usb: device has been detected
[  810.388726][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  810.462659][T15432] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.507383][    T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  810.634827][    T9] as10x_usb: error during firmware upload part1
[  810.641628][    T9] Registered device Elgato EyeTV DTT Deluxe
[  810.663138][    T9] usb 3-1: USB disconnect, device number 48
[  810.715087][    T9] Unregistered device Elgato EyeTV DTT Deluxe
[  810.720322][    T9] as10x_usb: device has been disconnected
[  811.527001][T15432] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.793105][T15460] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  811.835972][T15460] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  811.839728][T15464] can0: slcan on ttyS3.
[  812.016521][T15466] can0 (unregistered): slcan off ttyS3.
[  812.138854][T15432] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.150026][ T5826] Bluetooth: hci3: command tx timeout
[  812.977127][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1875'.
[  812.990355][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'.
[  812.997798][T15432] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.564234][T15490] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  813.715349][T15498] bond0: entered promiscuous mode
[  813.744529][T15498] bond_slave_0: entered promiscuous mode
[  813.760238][T15498] bond_slave_1: entered promiscuous mode
[  813.775817][T15498] batadv0: entered promiscuous mode
[  813.790407][T15498] 8021q: adding VLAN 0 to HW filter on device hsr2
[  814.151421][T15513] FAULT_INJECTION: forcing a failure.
[  814.151421][T15513] name failslab, interval 1, probability 0, space 0, times 0
[  814.164294][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.2.1879 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  814.175099][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  814.185198][T15513] Call Trace:
[  814.188532][T15513]  <TASK>
[  814.191508][T15513]  dump_stack_lvl+0x241/0x360
[  814.196233][T15513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  814.201485][T15513]  ? __pfx__printk+0x10/0x10
[  814.206119][T15513]  ? fs_reclaim_acquire+0x93/0x130
[  814.211273][T15513]  ? __pfx___might_resched+0x10/0x10
[  814.216612][T15513]  should_fail_ex+0x3b0/0x4e0
[  814.221331][T15513]  should_failslab+0xac/0x100
[  814.226055][T15513]  __kmalloc_noprof+0xdd/0x4c0
[  814.230858][T15513]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  814.236626][T15513]  tomoyo_realpath_from_path+0xcf/0x5e0
[  814.242227][T15513]  tomoyo_path_number_perm+0x236/0x860
[  814.247721][T15513]  ? __lock_acquire+0x1397/0x2100
[  814.252784][T15513]  ? tomoyo_path_number_perm+0x206/0x860
[  814.258457][T15513]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  814.264521][T15513]  ? __fget_files+0x2a/0x410
[  814.269160][T15513]  ? __fget_files+0x2a/0x410
[  814.273788][T15513]  security_file_ioctl+0xc6/0x2a0
[  814.278853][T15513]  __se_sys_ioctl+0x46/0x170
[  814.283497][T15513]  do_syscall_64+0xf3/0x230
[  814.288051][T15513]  ? clear_bhb_loop+0x35/0x90
[  814.292763][T15513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.298699][T15513] RIP: 0033:0x7f64eed85d29
[  814.303154][T15513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  814.322800][T15513] RSP: 002b:00007f64efc3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  814.331257][T15513] RAX: ffffffffffffffda RBX: 00007f64eef76160 RCX: 00007f64eed85d29
[  814.339261][T15513] RDX: 0000000020000000 RSI: 00000000804c4700 RDI: 0000000000000006
[  814.347262][T15513] RBP: 00007f64efc3d090 R08: 0000000000000000 R09: 0000000000000000
[  814.355265][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  814.363265][T15513] R13: 0000000000000000 R14: 00007f64eef76160 R15: 00007fff9dbeb608
[  814.371290][T15513]  </TASK>
[  814.375260][T15513] ERROR: Out of memory at tomoyo_realpath_from_path.
[  814.385979][ T5826] Bluetooth: hci3: command tx timeout
[  814.469903][T15432] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  815.203512][T15432] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.346080][T15436] chnl_net:caif_netlink_parms(): no params data found
[  815.442012][T15432] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.537737][T15432] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.830285][T15541] 8021q: VLANs not supported on ipvlan0
[  815.860424][T15548] loop9: detected capacity change from 0 to 6
[  815.872015][T15436] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.893982][T15436] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.901477][T15548] Dev loop9: unable to read RDB block 6
[  815.919526][T15548]  loop9: unable to read partition table
[  815.928964][T15436] bridge_slave_0: entered allmulticast mode
[  815.946412][T15548] loop9: partition table beyond EOD, truncated
[  815.955943][T15436] bridge_slave_0: entered promiscuous mode
[  815.965450][T15436] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.968092][T15548] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  815.968092][T15548] 
) failed (rc=-5)
[  815.999120][T15436] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.020821][T15436] bridge_slave_1: entered allmulticast mode
[  816.067335][T15436] bridge_slave_1: entered promiscuous mode
[  816.239827][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.252140][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.342394][ T5826] Bluetooth: hci3: command tx timeout
[  816.407350][T15436] team0: Port device team_slave_0 added
[  816.473304][T15436] team0: Port device team_slave_1 added
[  816.651705][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.683562][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.725548][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.738798][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.746690][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.773315][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  818.243399][T15436] hsr_slave_0: entered promiscuous mode
[  818.309014][T15436] hsr_slave_1: entered promiscuous mode
[  818.325918][ T5826] Bluetooth: hci3: command tx timeout
[  818.336282][T15436] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  818.344412][T15436] Cannot create hsr debugfs directory
[  818.379544][T15588] trusted_key: encrypted_key: insufficient parameters specified
[  818.389754][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1891'.
[  820.210604][T15651] netlink: 'syz.6.1905': attribute type 1 has an invalid length.
[  820.223650][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1905'.
[  820.277897][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  820.451855][    T9] usb 3-1: Using ep0 maxpacket: 8
[  820.471233][    T9] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  820.573317][    T9] usb 3-1: config 0 has no interface number 0
[  820.589027][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  820.598787][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.611874][    T9] usb 3-1: Product: syz
[  820.616485][    T9] usb 3-1: Manufacturer: syz
[  820.621749][    T9] usb 3-1: SerialNumber: syz
[  820.636254][    T9] usb 3-1: config 0 descriptor??
[  820.822605][    T9] msi2500 3-1:0.246: Registered as swradio24
[  820.849401][    T9] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  821.040842][    T9] usb 3-1: USB disconnect, device number 49
[  821.098376][T15669] ptrace attach of "./syz-executor exec"[11659] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[  821.394974][T15436] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  821.567198][T15436] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  821.624968][T15436] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  821.658383][T15436] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  821.742048][T15436] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.758923][T15436] 8021q: adding VLAN 0 to HW filter on device team0
[  821.795234][T15436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  821.805728][T15436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  821.825041][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.832239][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.851655][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.858822][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.262991][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.394124][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  822.565727][    T9] usb 3-1: Using ep0 maxpacket: 32
[  822.585832][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  822.602754][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.610821][    T9] usb 3-1: Product: syz
[  822.651756][    T9] usb 3-1: Manufacturer: syz
[  822.656437][    T9] usb 3-1: SerialNumber: syz
[  822.695578][    T9] usb 3-1: config 0 descriptor??
[  822.866742][T15436] veth0_vlan: entered promiscuous mode
[  822.916645][    T9] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  822.925741][    T9] 00 00 00 00 00 00 00 00 
[  822.930466][    T9] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  822.944025][T15436] veth1_vlan: entered promiscuous mode
[  823.039443][T15436] veth0_macvtap: entered promiscuous mode
[  823.076830][T15436] veth1_macvtap: entered promiscuous mode
[  823.108476][    T9] usb 3-1: USB disconnect, device number 50
[  823.138756][ T9537] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  823.164648][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.200482][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.250917][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.278285][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.289525][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  823.300626][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.311916][T15436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  823.326709][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  823.337546][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.347769][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  823.358617][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.368708][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  823.381396][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  823.397627][T15436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  823.856020][T15436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  823.917756][T15436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.965795][T15436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.974570][T15436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.087497][T15736] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  824.476186][T15744] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1923'.
[  824.603669][T15746] FAULT_INJECTION: forcing a failure.
[  824.603669][T15746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  824.617603][T15746] CPU: 1 UID: 0 PID: 15746 Comm: syz.2.1924 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  824.628407][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  824.638496][T15746] Call Trace:
[  824.641809][T15746]  <TASK>
[  824.644858][T15746]  dump_stack_lvl+0x241/0x360
[  824.649589][T15746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  824.654836][T15746]  ? __pfx__printk+0x10/0x10
[  824.659483][T15746]  should_fail_ex+0x3b0/0x4e0
[  824.664205][T15746]  _copy_to_user+0x31/0xb0
[  824.668783][T15746]  simple_read_from_buffer+0xca/0x150
[  824.674221][T15746]  proc_fail_nth_read+0x1e9/0x250
[  824.679302][T15746]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  824.684901][T15746]  ? rw_verify_area+0x55e/0x6f0
[  824.689800][T15746]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  824.695395][T15746]  vfs_read+0x1fc/0xb70
[  824.699635][T15746]  ? __pfx___mutex_lock+0x10/0x10
[  824.704711][T15746]  ? __pfx_vfs_read+0x10/0x10
[  824.709430][T15746]  ? __fget_files+0x2a/0x410
[  824.714054][T15746]  ? __fget_files+0x395/0x410
[  824.718766][T15746]  ? __fget_files+0x2a/0x410
[  824.723402][T15746]  ksys_read+0x18f/0x2b0
[  824.727690][T15746]  ? __pfx_ksys_read+0x10/0x10
[  824.732494][T15746]  ? do_syscall_64+0x100/0x230
[  824.737304][T15746]  ? do_syscall_64+0xb6/0x230
[  824.742024][T15746]  do_syscall_64+0xf3/0x230
[  824.746577][T15746]  ? clear_bhb_loop+0x35/0x90
[  824.751291][T15746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.757232][T15746] RIP: 0033:0x7f64eed8473c
[  824.761680][T15746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  824.781336][T15746] RSP: 002b:00007f64efc3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  824.789801][T15746] RAX: ffffffffffffffda RBX: 00007f64eef76160 RCX: 00007f64eed8473c
[  824.797811][T15746] RDX: 000000000000000f RSI: 00007f64efc3d0a0 RDI: 0000000000000007
[  824.805816][T15746] RBP: 00007f64efc3d090 R08: 0000000000000000 R09: 0000000000000000
[  824.813820][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  824.821845][T15746] R13: 0000000000000000 R14: 00007f64eef76160 R15: 00007fff9dbeb608
[  824.829869][T15746]  </TASK>
[  825.768321][T15752] netlink: 'syz.0.1926': attribute type 64 has an invalid length.
[  825.824834][ T9537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.832939][ T9537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.877358][ T7208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  825.885922][ T7208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  825.986157][  T974] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  826.157257][  T974] usb 9-1: Using ep0 maxpacket: 16
[  826.166231][  T974] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  826.176066][  T974] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  826.184195][  T974] usb 9-1: Product: syz
[  826.204648][ T5867] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  826.215956][  T974] usb 9-1: Manufacturer: syz
[  826.220614][  T974] usb 9-1: SerialNumber: syz
[  826.239032][  T974] usb 9-1: config 0 descriptor??
[  826.357464][ T5867] usb 3-1: Using ep0 maxpacket: 16
[  826.366121][ T5867] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.377947][ T8528] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  826.386268][ T5867] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.397551][ T5867] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  826.411474][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0
[  826.418378][ T5867] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  826.427551][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.437821][ T5867] usb 3-1: config 0 descriptor??
[  826.447696][   T25] usb 9-1: USB disconnect, device number 59
[  826.538053][ T8528] usb 5-1: Using ep0 maxpacket: 8
[  826.545362][ T8528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.558137][ T8528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.568249][ T8528] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  826.579909][ T8528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.600170][ T8528] usb 5-1: config 0 descriptor??
[  827.056090][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.066273][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.383705][ T8528] saitek 0003:06A3:0CCD.001F: unknown main item tag 0x0
[  827.483881][ T8528] saitek 0003:06A3:0CCD.001F: unknown main item tag 0x0
[  827.536754][ T8528] saitek 0003:06A3:0CCD.001F: item fetching failed at offset 2/11
[  827.555457][ T8528] saitek 0003:06A3:0CCD.001F: parse failed
[  827.571687][ T8528] saitek 0003:06A3:0CCD.001F: probe with driver saitek failed with error -22
[  827.622111][ T8528] usb 5-1: USB disconnect, device number 28
[  829.597794][ T5867] usbhid 3-1:0.0: can't add hid device: -71
[  829.606975][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  829.684881][ T5867] usb 3-1: USB disconnect, device number 51
[  829.845599][T15811] vlan3: entered promiscuous mode
[  829.862563][T15811] vlan3: entered allmulticast mode
[  829.883319][T15811] hsr_slave_1: entered allmulticast mode
[  830.277988][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1941'.
[  830.630001][T15826] ubi0: attaching mtd0
[  830.634594][T15826] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208)
[  830.690338][T15826] x_tables: ip_tables: osf match: only valid for protocol 6
[  831.788714][    T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  831.877809][T15829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  831.951389][    T8] usb 5-1: Using ep0 maxpacket: 16
[  831.958458][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  831.980406][    T8] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  831.996958][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.007976][    T8] usb 5-1: Product: syz
[  832.012220][    T8] usb 5-1: Manufacturer: syz
[  832.017089][    T8] usb 5-1: SerialNumber: syz
[  832.038260][    T8] usb 5-1: config 0 descriptor??
[  832.053838][    T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  832.163282][  T974] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  832.323197][    T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  832.332467][  T974] usb 3-1: Using ep0 maxpacket: 8
[  832.357437][    T8] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  832.369428][  T974] usb 3-1: no configurations
[  832.376817][  T974] usb 3-1: can't read configurations, error -22
[  832.392474][    T8] usb 5-1: USB disconnect, device number 29
[  832.531654][  T974] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  832.684989][  T974] usb 3-1: Using ep0 maxpacket: 8
[  832.692752][  T974] usb 3-1: no configurations
[  832.698832][  T974] usb 3-1: can't read configurations, error -22
[  832.714882][  T974] usb usb3-port1: attempt power cycle
[  833.046658][  T974] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  833.075978][  T974] usb 3-1: Using ep0 maxpacket: 8
[  833.082391][  T974] usb 3-1: no configurations
[  833.097249][  T974] usb 3-1: can't read configurations, error -22
[  833.237335][  T974] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  833.267005][  T974] usb 3-1: Using ep0 maxpacket: 8
[  833.272833][  T974] usb 3-1: no configurations
[  833.277843][    T8] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  833.286020][  T974] usb 3-1: can't read configurations, error -22
[  833.294224][  T974] usb usb3-port1: unable to enumerate USB device
[  833.441403][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  833.451048][    T8] usb 5-1: not running at top speed; connect to a high speed hub
[  833.460246][    T8] usb 5-1: config 253 has an invalid interface number: 202 but max is 0
[  833.469017][    T8] usb 5-1: config 253 has no interface number 0
[  833.477967][    T8] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  833.487397][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.496039][    T8] usb 5-1: Product: syz
[  833.500470][    T8] usb 5-1: Manufacturer: syz
[  833.505554][    T8] usb 5-1: SerialNumber: syz
[  835.264401][    T8] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  835.284874][ T7202] usb 5-1: Failed to submit usb control message: -71
[  835.307150][ T7202] usb 5-1: unable to send the bmi data to the device: -71
[  835.402819][ T7202] usb 5-1: unable to get target info from device
[  835.430674][    T8] usb 5-1: USB disconnect, device number 30
[  835.480100][ T7202] usb 5-1: could not get target info (-71)
[  835.502109][ T7202] usb 5-1: could not probe fw (-71)
[  836.549247][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1960'.
[  836.571293][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1960'.
[  836.863287][T15888] syz.6.1957: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  836.882941][ T8528] usb 9-1: new full-speed USB device number 60 using dummy_hcd
[  836.902507][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.6.1957 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  836.913381][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  836.923479][T15888] Call Trace:
[  836.926790][T15888]  <TASK>
[  836.929755][T15888]  dump_stack_lvl+0x241/0x360
[  836.934487][T15888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  836.939783][T15888]  ? __pfx__printk+0x10/0x10
[  836.944443][T15888]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  836.950915][T15888]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  836.957484][T15888]  warn_alloc+0x278/0x410
[  836.961955][T15888]  ? __pfx_warn_alloc+0x10/0x10
[  836.966865][T15888]  ? hash_netport4_resize+0x23b/0x1bb0
[  836.972377][T15888]  ? __get_vm_area_node+0x1c8/0x2d0
[  836.977631][T15888]  ? __get_vm_area_node+0x25c/0x2d0
[  836.982887][T15888]  __vmalloc_node_range_noprof+0x62f/0x1380
[  836.988825][T15888]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  836.994618][T15888]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  837.001026][T15888]  ? rcu_is_watching+0x15/0xb0
[  837.005836][T15888]  ? trace_kmalloc+0x1f/0xd0
[  837.010466][T15888]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  837.015962][T15888]  ? __kvmalloc_node_noprof+0x72/0x190
[  837.021495][T15888]  __kvmalloc_node_noprof+0x142/0x190
[  837.026923][T15888]  ? hash_netport4_resize+0x23b/0x1bb0
[  837.032440][T15888]  hash_netport4_resize+0x23b/0x1bb0
[  837.037792][T15888]  ? __pfx_hash_netport4_add+0x10/0x10
[  837.043323][T15888]  ? __local_bh_enable_ip+0x168/0x200
[  837.048748][T15888]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  837.054492][T15888]  ? call_ad+0x182/0xa70
[  837.058752][T15888]  call_ad+0x38b/0xa70
[  837.062836][T15888]  ? __pfx_call_ad+0x10/0x10
[  837.067442][T15888]  ? __nla_parse+0x40/0x60
[  837.071873][T15888]  ip_set_ad+0x7e0/0x990
[  837.076131][T15888]  ? __pfx_ip_set_ad+0x10/0x10
[  837.080901][T15888]  ? trace_contention_end+0x3c/0x120
[  837.086225][T15888]  ? nfnetlink_rcv_msg+0x225/0x1180
[  837.091458][T15888]  nfnetlink_rcv_msg+0xbec/0x1180
[  837.096539][T15888]  ? nfnetlink_rcv_msg+0x225/0x1180
[  837.101768][T15888]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  837.107235][T15888]  ? stack_trace_save+0x118/0x1d0
[  837.112290][T15888]  ? dev_hard_start_xmit+0x27a/0x7d0
[  837.117593][T15888]  ? __dev_queue_xmit+0x1b73/0x3f50
[  837.122818][T15888]  ? __netlink_deliver_tap+0x56b/0x7f0
[  837.128285][T15888]  ? netlink_deliver_tap+0x19d/0x1b0
[  837.133577][T15888]  ? netlink_unicast+0x7c4/0x990
[  837.138535][T15888]  ? netlink_sendmsg+0x8e4/0xcb0
[  837.143524][T15888]  ? __sock_sendmsg+0x221/0x270
[  837.148390][T15888]  ? ____sys_sendmsg+0x52a/0x7e0
[  837.153358][T15888]  ? __sys_sendmsg+0x269/0x350
[  837.158145][T15888]  netlink_rcv_skb+0x1e3/0x430
[  837.162919][T15888]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  837.168394][T15888]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  837.173728][T15888]  ? cap_capable+0x1b4/0x250
[  837.178333][T15888]  ? safesetid_security_capable+0xb2/0x1d0
[  837.184155][T15888]  ? bpf_lsm_capable+0x9/0x10
[  837.188839][T15888]  ? security_capable+0x7e/0x2d0
[  837.193814][T15888]  nfnetlink_rcv+0x297/0x2ab0
[  837.198507][T15888]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  837.204245][T15888]  ? __dev_queue_xmit+0x2f4/0x3f50
[  837.209368][T15888]  ? __dev_queue_xmit+0x1775/0x3f50
[  837.214575][T15888]  ? kasan_save_track+0x51/0x80
[  837.219445][T15888]  ? ____sys_sendmsg+0x52a/0x7e0
[  837.224394][T15888]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  837.229519][T15888]  ? __dev_queue_xmit+0x2f4/0x3f50
[  837.234670][T15888]  ? __pfx___dev_queue_xmit+0x10/0x10
[  837.240107][T15888]  ? ref_tracker_free+0x643/0x7e0
[  837.245147][T15888]  ? __asan_memcpy+0x40/0x70
[  837.249751][T15888]  ? __pfx_ref_tracker_free+0x10/0x10
[  837.255142][T15888]  ? netlink_deliver_tap+0x2e/0x1b0
[  837.260345][T15888]  ? skb_clone+0x240/0x390
[  837.264773][T15888]  ? __pfx_lock_release+0x10/0x10
[  837.269830][T15888]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  837.275326][T15888]  ? netlink_deliver_tap+0x2e/0x1b0
[  837.280535][T15888]  netlink_unicast+0x7f6/0x990
[  837.285322][T15888]  ? __pfx_netlink_unicast+0x10/0x10
[  837.290623][T15888]  ? __virt_addr_valid+0x45f/0x530
[  837.295745][T15888]  ? __phys_addr_symbol+0x2f/0x70
[  837.300777][T15888]  ? __check_object_size+0x47a/0x730
[  837.306080][T15888]  netlink_sendmsg+0x8e4/0xcb0
[  837.310867][T15888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.316189][T15888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.321481][T15888]  __sock_sendmsg+0x221/0x270
[  837.326179][T15888]  ____sys_sendmsg+0x52a/0x7e0
[  837.330969][T15888]  ? __pfx_____sys_sendmsg+0x10/0x10
[  837.336275][T15888]  ? __fget_files+0x2a/0x410
[  837.340893][T15888]  ? __fget_files+0x2a/0x410
[  837.345495][T15888]  __sys_sendmsg+0x269/0x350
[  837.350101][T15888]  ? __pfx___sys_sendmsg+0x10/0x10
[  837.355250][T15888]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  837.361587][T15888]  ? do_syscall_64+0x100/0x230
[  837.366367][T15888]  ? do_syscall_64+0xb6/0x230
[  837.371076][T15888]  do_syscall_64+0xf3/0x230
[  837.375598][T15888]  ? clear_bhb_loop+0x35/0x90
[  837.380301][T15888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.386213][T15888] RIP: 0033:0x7fa1a0f85d29
[  837.390634][T15888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  837.410273][T15888] RSP: 002b:00007fa1a1e1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  837.418705][T15888] RAX: ffffffffffffffda RBX: 00007fa1a1175fa0 RCX: 00007fa1a0f85d29
[  837.426778][T15888] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000007
[  837.434766][T15888] RBP: 00007fa1a1001b08 R08: 0000000000000000 R09: 0000000000000000
[  837.442766][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  837.450743][T15888] R13: 0000000000000000 R14: 00007fa1a1175fa0 R15: 00007fff668625e8
[  837.458754][T15888]  </TASK>
[  837.489723][T15888] Mem-Info:
[  837.493016][T15888] active_anon:392 inactive_anon:9526 isolated_anon:0
[  837.493016][T15888]  active_file:17446 inactive_file:41222 isolated_file:0
[  837.493016][T15888]  unevictable:768 dirty:86 writeback:0
[  837.493016][T15888]  slab_reclaimable:6540 slab_unreclaimable:107587
[  837.493016][T15888]  mapped:34214 shmem:4363 pagetables:1119
[  837.493016][T15888]  sec_pagetables:0 bounce:0
[  837.493016][T15888]  kernel_misc_reclaimable:0
[  837.493016][T15888]  free:1306141 free_pcp:1387 free_cma:0
[  837.539449][T15888] Node 0 active_anon:1568kB inactive_anon:38104kB active_file:69708kB inactive_file:164888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136856kB dirty:340kB writeback:0kB shmem:15916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12712kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no
[  838.160188][T15888] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  838.193307][T15888] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  838.221970][T15888] lowmem_reserve[]: 0 2465 2466 0 0
[  838.227376][T15888] Node 0 DMA32 free:1306580kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:8164kB inactive_anon:26568kB active_file:68936kB inactive_file:164836kB unevictable:1536kB writepending:340kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:192kB free_cma:0kB
[  838.309734][ T8528] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.320527][T15888] lowmem_reserve[]: 0 0 0 0 0
[  838.325731][T15888] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  838.337268][ T8528] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  838.362343][ T8528] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.370563][ T8528] usb 9-1: Product: syz
[  838.374968][ T8528] usb 9-1: Manufacturer: syz
[  838.379603][ T8528] usb 9-1: SerialNumber: syz
[  838.394558][ T8528] usb 9-1: config 0 descriptor??
[  838.430780][ T8528] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  838.451886][T15888] lowmem_reserve[]: 0 0 0 0 0
[  838.456723][T15888] Node 1 Normal free:3907876kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  838.486583][T15888] lowmem_reserve[]: 0 0 0 0 0
[  838.491612][T15888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  838.506115][T15888] Node 0 DMA32: 317*4kB (UM) 1087*8kB (UME) 727*16kB (UME) 409*32kB (UME) 342*64kB (UME) 92*128kB (UME) 110*256kB (UME) 141*512kB (UME) 41*1024kB (UME) 6*2048kB (ME) 267*4096kB (UM) = 1316604kB
[  838.534635][T15888] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  838.546928][T15888] Node 1 Normal: 225*4kB (UME) 66*8kB (UME) 49*16kB (UME) 206*32kB (UME) 89*64kB (UME) 37*128kB (UME) 12*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3907876kB
[  838.568020][T15888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  838.578123][T15888] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  838.583404][ T5867] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  838.588595][T15888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  838.597801][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.623683][ T8528] usb 9-1: USB disconnect, device number 60
[  838.623945][T15888] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  838.639844][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.655522][T15888] 60183 total pagecache pages
[  838.669510][T15888] 0 pages in swap cache
[  838.673833][T15888] Free swap  = 124540kB
[  838.678035][T15888] Total swap = 124996kB
[  838.689558][T15888] 2097051 pages RAM
[  838.693436][T15888] 0 pages HighMem/MovableOnly
[  838.704607][T15888] 427005 pages reserved
[  838.713994][T15888] 0 pages cma reserved
[  838.916929][ T5869] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  839.210941][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.290683][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  839.395753][ T5869] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  839.405649][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  839.413950][ T5869] usb 5-1: SerialNumber: syz
[  839.701648][ T5869] usb 5-1: 0:2 : does not exist
[  839.714507][ T5869] usb 5-1: USB disconnect, device number 31
[  842.059402][T15973] sg_write: data in/out 393216/1 bytes for SCSI command 0xf2-- guessing data in;
[  842.059402][T15973]    program syz.6.1982 not setting count and/or reply_len properly
[  842.113560][T15975] netlink: 'syz.4.1981': attribute type 10 has an invalid length.
[  842.138640][T15975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1981'.
[  842.169414][T15975] team0: entered promiscuous mode
[  842.174674][T15975] team_slave_0: entered promiscuous mode
[  842.203245][T15975] team_slave_1: entered promiscuous mode
[  842.238325][T15975] team0: entered allmulticast mode
[  842.279484][T15975] team_slave_0: entered allmulticast mode
[  842.303533][T15975] team_slave_1: entered allmulticast mode
[  842.358534][T15975] bridge0: port 3(team0) entered blocking state
[  842.413821][T15975] bridge0: port 3(team0) entered disabled state
[  842.478495][T15975] bridge0: port 3(team0) entered blocking state
[  842.485082][T15975] bridge0: port 3(team0) entered forwarding state
[  844.133042][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.157186][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.236007][T16002] lo: entered promiscuous mode
[  844.246899][T16002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  844.268228][T16005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  844.275614][T16005] IPv6: NLM_F_CREATE should be set when creating new route
[  844.282946][T16005] IPv6: NLM_F_CREATE should be set when creating new route
[  846.129203][    T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  846.238981][T16027] openvswitch: netlink: Tunnel attr 54 out of range max 16
[  846.999346][    T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  847.008613][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.019154][    T8] usb 5-1: config 0 descriptor??
[  847.030385][    T8] cp210x 5-1:0.0: cp210x converter detected
[  847.150948][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'.
[  847.274626][    T8] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71
[  847.318242][    T8] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  847.336960][    T8] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  847.401939][    T8] usb 5-1: cp210x converter now attached to ttyUSB0
[  847.426796][    T8] usb 5-1: USB disconnect, device number 32
[  847.452789][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  847.468551][T16043] xt_hashlimit: invalid rate
[  847.471114][    T8] cp210x 5-1:0.0: device disconnected
[  847.817250][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2000'.
[  847.966365][T16053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'.
[  848.028219][T16051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'.
[  848.175960][T16051] 9pnet_fd: Insufficient options for proto=fd
[  848.446754][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'.
[  852.480147][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  852.496509][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  853.463483][T16128] netfs: Couldn't get user pages (rc=-14)
[  854.074056][T16141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2027'.
[  854.086201][T16141] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  854.278344][    T8] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  854.792846][    T8] usb 9-1: Using ep0 maxpacket: 16
[  854.805483][    T8] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a
[  854.814672][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.828346][    T8] usb 9-1: Product: syz
[  854.832635][    T8] usb 9-1: Manufacturer: syz
[  854.837284][    T8] usb 9-1: SerialNumber: syz
[  854.845632][    T8] usb 9-1: config 0 descriptor??
[  854.856397][    T8] mcba_usb 9-1:0.0: Can't find endpoints
[  855.070120][    T8] usb 9-1: USB disconnect, device number 61
[  857.617354][T16190] kvm: kvm [16189]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  857.650992][T16190] kvm: kvm [16189]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  857.855032][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'.
[  857.933103][T16198] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2042'.
[  858.833293][T16216] overlayfs: failed to resolve './file1': -2
[  860.232183][T16240] binder_alloc: 16239: binder_alloc_buf, no vma
[  860.472255][   T25] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  860.655716][   T25] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  860.672136][   T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  860.689354][   T25] usb 9-1: config 0 descriptor??
[  860.929264][   T25] kaweth 9-1:0.0: Firmware present in device.
[  861.114954][   T25] kaweth 9-1:0.0: Statistics collection: 0
[  861.134475][   T25] kaweth 9-1:0.0: Multicast filter limit: 0
[  861.151877][   T25] kaweth 9-1:0.0: MTU: 0
[  861.156209][   T25] kaweth 9-1:0.0: Read MAC address 00:00:00:00:00:00
[  861.656180][T16273] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  861.723244][   T25] kaweth 9-1:0.0: Error setting receive filter
[  861.731331][   T25] kaweth 9-1:0.0: probe with driver kaweth failed with error -5
[  861.742913][   T25] usb 9-1: USB disconnect, device number 62
[  861.891812][ T5867] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  862.034776][ T5867] usb 3-1: Using ep0 maxpacket: 32
[  862.047394][ T5867] usb 3-1: config index 0 descriptor too short (expected 2852, got 36)
[  862.064779][ T5867] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  862.108808][ T5867] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  862.164404][ T5867] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  862.208629][ T5867] usb 3-1: New USB device found, idVendor=006a, idProduct=032c, bcdDevice= 0.00
[  862.288644][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.651707][ T5867] usb 3-1: config 0 descriptor??
[  864.379162][ T5869] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  864.569955][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10
[  864.665952][ T5869] usb 9-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00
[  864.765401][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.193033][  T974] usb 3-1: USB disconnect, device number 57
[  865.200574][ T5869] usb 9-1: config 0 descriptor??
[  865.309237][T16314] netlink: 'syz.6.2073': attribute type 1 has an invalid length.
[  865.337200][T16314] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2073'.
[  866.510863][ T5869] aquacomputer_d5next 0003:0C70:F001.0020: hidraw0: USB HID vdd.33 Device [HID 0c70:f001] on usb-dummy_hcd.8-1/input0
[  866.928172][T16334] netlink: zone id is out of range
[  867.809682][  T974] usb 9-1: USB disconnect, device number 63
[  867.921631][    T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0)
[  867.938136][    T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0)
[  869.035559][T16346] netlink: 'syz.2.2081': attribute type 21 has an invalid length.
[  869.060559][T16352] sctp: [Deprecated]: syz.8.2083 (pid 16352) Use of struct sctp_assoc_value in delayed_ack socket option.
[  869.060559][T16352] Use struct sctp_sack_info instead
[  869.077656][T16346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2081'.
[  869.367356][T16358] kvm: kvm [16356]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  869.422757][T16358] kvm: kvm [16356]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  870.530216][T16381] netlink: zone id is out of range
[  872.281102][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2093'.
[  872.441916][T16406] program syz.4.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  873.167868][T16418] binder: 16417:16418 ioctl 400c620e 0 returned -14
[  873.393838][ T5867] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  873.582162][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.594150][ T5867] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  873.612965][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.632774][ T5867] usb 3-1: config 0 descriptor??
[  873.653365][ T5867] option 3-1:0.0: GSM modem (1-port) converter detected
[  876.369407][  T974] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[  876.747121][T16453] overlay: Unknown parameter 'euid>00000000000000000000'
[  877.139771][T16451] cgroup: Unknown subsys name 'fsuuid'
[  877.739644][  T974] usb 9-1: Using ep0 maxpacket: 16
[  877.858903][  T974] usb 9-1: unable to read config index 0 descriptor/start: -71
[  877.867668][  T974] usb 9-1: can't read configurations, error -71
[  877.935513][T16459] netfs: Couldn't get user pages (rc=-14)
[  877.973879][T16465] Invalid logical block size (-1)
[  879.130484][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2120'.
[  879.230365][T16484] vlan2: entered promiscuous mode
[  879.266034][T16484] team0: entered promiscuous mode
[  879.559435][T16484] team0: left promiscuous mode
[  884.235911][ T5826] Bluetooth: hci3: command tx timeout
[  885.393699][T16528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  885.447663][T16528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  885.663128][    C0] Unknown status report in ack skb
[  885.952159][T16536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  886.005432][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2135'.
[  886.033406][T16536] batman_adv: batadv0: Adding interface: ip6gretap1
[  886.143942][T16536] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  886.656886][ T5820] kworker/0:3 (5820) used greatest stack depth: 14040 bytes left
[  886.856424][T16536] batman_adv: batadv0: Interface activated: ip6gretap1
[  886.890568][T16538] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  886.945525][T16538] batman_adv: batadv0: Removing interface: ip6gretap1
[  887.992479][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2138'.
[  888.224731][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2139'.
[  889.834990][T16571] fuseblk: Unknown parameter 'measure'
[  889.957604][  T974] usb 3-1: USB disconnect, device number 58
[  889.964227][  T974] option 3-1:0.0: device disconnected
[  890.313249][T16572] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.023772][T16572] bond0: (slave rose0): Enslaving as an active interface with an up link
[  891.047753][T16581] libceph: resolve '0.' (ret=-3): failed
[  891.386893][   T29] kauditd_printk_skb: 55 callbacks suppressed
[  891.386915][   T29] audit: type=1326 audit(1736156629.083:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16591 comm="syz.8.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e3d85d29 code=0x7ffc0000
[  891.415187][    C1] vkms_vblank_simulate: vblank timer overrun
[  891.436747][   T29] audit: type=1326 audit(1736156629.083:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16591 comm="syz.8.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e3d85d29 code=0x7ffc0000
[  894.589361][T16622] /dev/sg0: Can't lookup blockdev
[  894.847692][ T5867] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  895.444166][ T5867] usb 5-1: Using ep0 maxpacket: 16
[  895.454321][ T5867] usb 5-1: config 0 has an invalid interface number: 253 but max is 0
[  895.462557][ T5867] usb 5-1: config 0 has no interface number 0
[  895.477550][ T5867] usb 5-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice=e8.e1
[  895.506051][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.536371][ T5867] usb 5-1: Product: syz
[  895.542090][ T5867] usb 5-1: Manufacturer: syz
[  895.546750][ T5867] usb 5-1: SerialNumber: syz
[  895.570180][ T5867] usb 5-1: config 0 descriptor??
[  895.593383][ T5867] usb 5-1: can't set first interface for hiFace device.
[  895.634838][ T5867] snd-usb-hiface 5-1:0.253: probe with driver snd-usb-hiface failed with error -5
[  895.792357][T16618] usb usb7: usbfs: process 16618 (syz.4.2159) did not claim interface 0 before use
[  895.802167][T16618] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  895.819379][T16618] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2159'.
[  895.861904][T16618] PKCS8: Unsupported PKCS#8 version
[  896.005016][ T5867] usb 5-1: USB disconnect, device number 33
[  896.456467][T16648] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  896.472999][T16648] binder: 16647:16648 ioctl 400c620e 200001c0 returned -22
[  896.483163][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2168'.
[  896.576247][T16655] futex_wake_op: syz.4.2170 tries to shift op by -1; fix this program
[  898.072221][T16663] Bluetooth: hci5: Frame reassembly failed (-84)
[  899.192780][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2173'.
[  900.561363][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  902.212308][ T5867] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  904.731816][T16727] netlink: zone id is out of range
[  904.770830][T14509] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[  904.784648][ T5867] usb 5-1: device descriptor read/all, error -71
[  904.935473][T14509] usb 9-1: Using ep0 maxpacket: 32
[  904.942854][T14509] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  904.959503][T14509] usb 9-1: config 0 has no interface number 0
[  905.184033][T14509] usb 9-1: config 0 interface 184 has no altsetting 0
[  905.192123][T14509] usb 9-1: string descriptor 0 read error: -71
[  905.198478][T14509] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  905.207859][T14509] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.220134][T14509] usb 9-1: config 0 descriptor??
[  905.258156][T14509] usb 9-1: can't set config #0, error -71
[  905.467816][T14509] usb 9-1: USB disconnect, device number 66
[  907.189412][ T5826] Bluetooth: hci4: command 0x0406 tx timeout
[  907.194927][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2201'.
[  907.518327][   T25] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  907.752937][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  907.831625][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  907.954981][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  908.175685][  T974] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  908.494698][T16774] syz.8.2207: attempt to access beyond end of device
[  908.494698][T16774] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0
[  908.566008][  T974] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  908.591098][T16774] syz.8.2207: attempt to access beyond end of device
[  908.591098][T16774] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0
[  908.604633][  T974] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[  908.637039][  T974] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  908.658394][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  908.688148][  T974] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  908.708314][T16774] syz.8.2207: attempt to access beyond end of device
[  908.708314][T16774] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0
[  908.743066][  T974] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  908.760232][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  908.797415][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.815961][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  908.836067][T16774] UDF-fs: Scanning with blocksize 512 failed
[  908.863506][T16774] syz.8.2207: attempt to access beyond end of device
[  908.863506][T16774] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0
[  908.913012][T16774] syz.8.2207: attempt to access beyond end of device
[  908.913012][T16774] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0
[  908.929764][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  908.938964][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.966211][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  908.967125][   T25] usb 3-1: config 0 descriptor??
[  908.976344][T16774] syz.8.2207: attempt to access beyond end of device
[  908.976344][T16774] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0
[  908.994282][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  909.004805][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  909.012520][T16774] UDF-fs: Scanning with blocksize 1024 failed
[  909.020365][T16774] syz.8.2207: attempt to access beyond end of device
[  909.020365][T16774] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0
[  909.036383][T16774] syz.8.2207: attempt to access beyond end of device
[  909.036383][T16774] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0
[  909.050102][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  909.060947][T16774] syz.8.2207: attempt to access beyond end of device
[  909.060947][T16774] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0
[  909.123520][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  909.157371][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  909.202023][T16774] UDF-fs: Scanning with blocksize 2048 failed
[  909.222915][T16774] syz.8.2207: attempt to access beyond end of device
[  909.222915][T16774] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0
[  909.278685][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[  909.323151][T16774] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[  909.356770][T16774] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[  909.383458][T16774] UDF-fs: Scanning with blocksize 4096 failed
[  909.413996][T16774] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[  909.885401][  T974] ath6kl: Failed to submit usb control message: -110
[  909.894873][  T974] ath6kl: unable to send the bmi data to the device: -110
[  909.916903][  T974] ath6kl: Unable to send get target info: -110
[  909.961486][  T974] ath6kl: Failed to init ath6kl core: -110
[  910.001601][  T974] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110
[  910.153066][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  910.161583][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  910.171992][   T25] usb 3-1: USB disconnect, device number 59
[  910.285304][  T974] usb 5-1: USB disconnect, device number 36
[  910.573201][T16789] openvswitch: netlink: Flow actions attr not present in new flow.
[  910.644697][T16789] netlink: 'syz.8.2208': attribute type 3 has an invalid length.
[  911.269145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  911.278712][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  911.316236][T16790] netlink: zone id is out of range
[  911.858803][T16802] erofs (device erofs): cannot read erofs superblock
[  912.344579][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'.
[  913.435872][   T25] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  913.619677][   T25] usb 3-1: Using ep0 maxpacket: 16
[  913.648454][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  913.769974][   T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  917.766636][   T25] usb 3-1: string descriptor 0 read error: -71
[  917.773280][   T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  917.792372][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.813104][T16832] xt_l2tp: v2 doesn't support IP mode
[  917.837721][   T25] usb 3-1: can't set config #1, error -71
[  917.876465][   T25] usb 3-1: USB disconnect, device number 60
[  918.005699][T16839] netlink: zone id is out of range
[  918.033044][T16841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2227'.
[  918.105623][T16841] binder: BINDER_SET_CONTEXT_MGR already set
[  918.122880][T16841] binder: 16840:16841 ioctl 4018620d 200001c0 returned -16
[  918.257522][   T25] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  918.457710][   T25] usb 3-1: device descriptor read/64, error -71
[  918.721678][   T25] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  918.857732][   T25] usb 3-1: device descriptor read/64, error -71
[  919.063850][   T25] usb usb3-port1: attempt power cycle
[  919.178434][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'.
[  919.429353][   T25] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  919.451038][   T25] usb 3-1: device descriptor read/8, error -71
[  919.964560][   T25] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  920.265424][   T25] usb 3-1: device descriptor read/8, error -71
[  920.519096][   T25] usb usb3-port1: unable to enumerate USB device
[  922.183165][T16878] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  922.595829][T16881] fuse: Unknown parameter '000000000000000000000030x00000000000000040000000000000000000000300000000000000000000'
[  922.704152][T16883] cgroup: none used incorrectly
[  922.817243][T16881] nbd: must specify at least one socket
[  922.992523][T16883] orangefs_mount: mount request failed with -4
[  923.110621][T16889] netlink: zone id is out of range
[  923.755953][T10604] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  923.908200][T10604] usb 3-1: Using ep0 maxpacket: 8
[  923.927484][T10604] usb 3-1: unable to get BOS descriptor or descriptor too short
[  923.949372][T10604] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  923.966281][T10604] usb 3-1: config 1 has no interface number 1
[  923.982883][T10604] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  924.001701][T10604] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  924.013421][T10604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.021521][T10604] usb 3-1: Product: syz
[  924.036102][T10604] usb 3-1: Manufacturer: syz
[  924.045917][T10604] usb 3-1: SerialNumber: syz
[  924.313512][T10604] usb 3-1: 2:1 : sample bitwidth 128 in over sample bytes 1
[  924.347230][T10604] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  924.376678][T10604] usb 3-1: USB disconnect, device number 65
[  925.918834][T10604] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[  926.123548][T10604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  926.177153][T10604] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  926.221621][T10604] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  926.249285][T10604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.275117][T10604] usb 9-1: config 0 descriptor??
[  926.366012][T16934] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  927.971647][T10604] usb 9-1: string descriptor 0 read error: -71
[  928.034071][T10604] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  928.150086][T10604] usb 9-1: USB disconnect, device number 67
[  930.747626][T16959] pim6reg: entered allmulticast mode
[  932.128295][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'.
[  932.294875][T16983] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  933.628256][   T25] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  933.718315][T16986] warn_alloc: 1 callbacks suppressed
[  933.718339][T16986] syz.8.2265: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  933.752173][   T25] usb 3-1: device descriptor read/64, error -71
[  933.759248][T16986] CPU: 0 UID: 0 PID: 16986 Comm: syz.8.2265 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[  933.770079][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  933.780177][T16986] Call Trace:
[  933.783528][T16986]  <TASK>
[  933.786492][T16986]  dump_stack_lvl+0x241/0x360
[  933.791220][T16986]  ? __pfx_dump_stack_lvl+0x10/0x10
[  933.796465][T16986]  ? __pfx__printk+0x10/0x10
[  933.801105][T16986]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  933.807572][T16986]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  933.814137][T16986]  warn_alloc+0x278/0x410
[  933.818524][T16986]  ? __pfx_warn_alloc+0x10/0x10
[  933.823427][T16986]  ? hash_netport4_resize+0x23b/0x1bb0
[  933.828936][T16986]  ? __get_vm_area_node+0x1c8/0x2d0
[  933.834176][T16986]  ? __get_vm_area_node+0x25c/0x2d0
[  933.839428][T16986]  __vmalloc_node_range_noprof+0x62f/0x1380
[  933.845411][T16986]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  933.851206][T16986]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  933.857583][T16986]  ? rcu_is_watching+0x15/0xb0
[  933.862395][T16986]  ? trace_kmalloc+0x1f/0xd0
[  933.867025][T16986]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  933.872525][T16986]  ? __kvmalloc_node_noprof+0x72/0x190
[  933.878032][T16986]  __kvmalloc_node_noprof+0x142/0x190
[  933.883450][T16986]  ? hash_netport4_resize+0x23b/0x1bb0
[  933.888961][T16986]  hash_netport4_resize+0x23b/0x1bb0
[  933.894309][T16986]  ? __pfx_hash_netport4_add+0x10/0x10
[  933.900185][T16986]  ? __local_bh_enable_ip+0x168/0x200
[  933.905626][T16986]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  933.911419][T16986]  ? call_ad+0x182/0xa70
[  933.915718][T16986]  call_ad+0x38b/0xa70
[  933.919845][T16986]  ? __pfx_call_ad+0x10/0x10
[  933.924496][T16986]  ? __nla_parse+0x40/0x60
[  933.928964][T16986]  ip_set_ad+0x7e0/0x990
[  933.933255][T16986]  ? __pfx_ip_set_ad+0x10/0x10
[  933.938062][T16986]  ? trace_contention_end+0x3c/0x120
[  933.943460][T16986]  ? nfnetlink_rcv_msg+0x225/0x1180
[  933.948702][T16986]  nfnetlink_rcv_msg+0xbec/0x1180
[  933.953768][T16986]  ? nfnetlink_rcv_msg+0x225/0x1180
[  933.959031][T16986]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  933.964534][T16986]  ? stack_trace_save+0x118/0x1d0
[  933.969673][T16986]  ? dev_hard_start_xmit+0x27a/0x7d0
[  933.975005][T16986]  ? __dev_queue_xmit+0x1b73/0x3f50
[  933.980257][T16986]  ? __netlink_deliver_tap+0x56b/0x7f0
[  933.985760][T16986]  ? netlink_deliver_tap+0x19d/0x1b0
[  933.991091][T16986]  ? netlink_unicast+0x7c4/0x990
[  933.996086][T16986]  ? netlink_sendmsg+0x8e4/0xcb0
[  934.001066][T16986]  ? __sock_sendmsg+0x221/0x270
[  934.006065][T16986]  ? ____sys_sendmsg+0x52a/0x7e0
[  934.011148][T16986]  ? __sys_sendmsg+0x269/0x350
[  934.015968][T16986]  netlink_rcv_skb+0x1e3/0x430
[  934.020848][T16986]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  934.026353][T16986]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  934.031695][T16986]  ? cap_capable+0x1b4/0x250
[  934.036332][T16986]  ? safesetid_security_capable+0xb2/0x1d0
[  934.042187][T16986]  ? bpf_lsm_capable+0x9/0x10
[  934.046902][T16986]  ? security_capable+0x7e/0x2d0
[  934.051890][T16986]  nfnetlink_rcv+0x297/0x2ab0
[  934.056616][T16986]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  934.062390][T16986]  ? __dev_queue_xmit+0x2f4/0x3f50
[  934.067550][T16986]  ? __dev_queue_xmit+0x1775/0x3f50
[  934.072790][T16986]  ? kasan_save_track+0x51/0x80
[  934.077689][T16986]  ? ____sys_sendmsg+0x52a/0x7e0
[  934.082690][T16986]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  934.085865][   T25] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  934.087825][T16986]  ? __dev_queue_xmit+0x2f4/0x3f50
[  934.100542][T16986]  ? __pfx___dev_queue_xmit+0x10/0x10
[  934.105977][T16986]  ? ref_tracker_free+0x643/0x7e0
[  934.111042][T16986]  ? __asan_memcpy+0x40/0x70
[  934.115676][T16986]  ? __pfx_ref_tracker_free+0x10/0x10
[  934.121108][T16986]  ? netlink_deliver_tap+0x2e/0x1b0
[  934.126344][T16986]  ? skb_clone+0x240/0x390
[  934.130836][T16986]  ? __pfx_lock_release+0x10/0x10
[  934.135913][T16986]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  934.141428][T16986]  ? netlink_deliver_tap+0x2e/0x1b0
[  934.146672][T16986]  netlink_unicast+0x7f6/0x990
[  934.151493][T16986]  ? __pfx_netlink_unicast+0x10/0x10
[  934.156827][T16986]  ? __virt_addr_valid+0x45f/0x530
[  934.161981][T16986]  ? __phys_addr_symbol+0x2f/0x70
[  934.167044][T16986]  ? __check_object_size+0x47a/0x730
[  934.172388][T16986]  netlink_sendmsg+0x8e4/0xcb0
[  934.177209][T16986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.182550][T16986]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.187875][T16986]  __sock_sendmsg+0x221/0x270
[  934.192611][T16986]  ____sys_sendmsg+0x52a/0x7e0
[  934.197431][T16986]  ? __pfx_____sys_sendmsg+0x10/0x10
[  934.203015][T16986]  ? __fget_files+0x2a/0x410
[  934.207643][T16986]  ? __fget_files+0x2a/0x410
[  934.212279][T16986]  __sys_sendmsg+0x269/0x350
[  934.216915][T16986]  ? __pfx___sys_sendmsg+0x10/0x10
[  934.222133][T16986]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  934.228500][T16986]  ? do_syscall_64+0x100/0x230
[  934.233316][T16986]  ? do_syscall_64+0xb6/0x230
[  934.238042][T16986]  do_syscall_64+0xf3/0x230
[  934.242594][T16986]  ? clear_bhb_loop+0x35/0x90
[  934.247310][T16986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.253268][T16986] RIP: 0033:0x7f12e3d85d29
[  934.257728][T16986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  934.277373][T16986] RSP: 002b:00007f12e4c89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.285830][T16986] RAX: ffffffffffffffda RBX: 00007f12e3f75fa0 RCX: 00007f12e3d85d29
[  934.293840][T16986] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000007
[  934.301934][T16986] RBP: 00007f12e3e01b08 R08: 0000000000000000 R09: 0000000000000000
[  934.309938][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  934.317940][T16986] R13: 0000000000000000 R14: 00007f12e3f75fa0 R15: 00007ffe7443d128
[  934.325967][T16986]  </TASK>
[  934.329155][    C0] vkms_vblank_simulate: vblank timer overrun
[  934.542973][   T25] usb 3-1: device descriptor read/64, error -71
[  934.552693][T16986] Mem-Info:
[  934.555856][T16986] active_anon:393 inactive_anon:11352 isolated_anon:0
[  934.555856][T16986]  active_file:21512 inactive_file:37623 isolated_file:0
[  934.555856][T16986]  unevictable:768 dirty:93 writeback:0
[  934.555856][T16986]  slab_reclaimable:6560 slab_unreclaimable:109446
[  934.555856][T16986]  mapped:32425 shmem:2570 pagetables:1159
[  934.555856][T16986]  sec_pagetables:0 bounce:0
[  934.555856][T16986]  kernel_misc_reclaimable:0
[  934.555856][T16986]  free:1299423 free_pcp:1954 free_cma:0
[  934.695246][T16986] Node 0 active_anon:1572kB inactive_anon:47408kB active_file:85972kB inactive_file:150492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130800kB dirty:372kB writeback:0kB shmem:9844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12576kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no
[  934.727935][    C0] vkms_vblank_simulate: vblank timer overrun
[  934.780632][T16986] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  934.820596][    C0] vkms_vblank_simulate: vblank timer overrun
[  934.922042][   T25] usb usb3-port1: attempt power cycle
[  934.929256][T16986] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  934.962080][T16986] lowmem_reserve[]: 0 2465 2466 0 0
[  934.971825][T16986] Node 0 DMA32 free:1270928kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1568kB inactive_anon:33776kB active_file:85192kB inactive_file:150440kB unevictable:1536kB writepending:372kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:22444kB local_pcp:21528kB free_cma:0kB
[  935.024720][T16986] lowmem_reserve[]: 0 0 0 0 0
[  935.056158][T16986] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  935.122874][T16986] lowmem_reserve[]: 0 0 0 0 0
[  935.141450][T16986] Node 1 Normal free:3907876kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  935.233120][T16986] lowmem_reserve[]: 0 0 0 0 0
[  935.262182][T16986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  935.276571][   T25] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  935.367479][T17008] ipt_REJECT: ECHOREPLY no longer supported.
[  935.407258][T16986] Node 0 DMA32: 2*4kB (UE) 76*8kB (ME) 179*16kB (UE) 118*32kB (UME) 109*64kB (UE) 39*128kB (UME) 130*256kB (UME) 152*512kB (UME) 45*1024kB (UME) 4*2048kB (ME) 261*4096kB (UM) = 1253656kB
[  935.482208][   T25] usb 3-1: device descriptor read/8, error -71
[  935.525236][T16986] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  935.543363][T16986] Node 1 Normal: 225*4kB (UME) 66*8kB (UME) 49*16kB (UME) 206*32kB (UME) 89*64kB (UME) 37*128kB (UME) 12*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3907876kB
[  935.609949][T16986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  935.629072][T16986] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  935.692310][T16986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  935.708092][T16986] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  935.718084][T16986] 63492 total pagecache pages
[  935.722800][T16986] 0 pages in swap cache
[  935.727196][T16986] Free swap  = 124540kB
[  935.731389][T16986] Total swap = 124996kB
[  935.735701][T16986] 2097051 pages RAM
[  935.739899][T16986] 0 pages HighMem/MovableOnly
[  935.744674][T16986] 427005 pages reserved
[  935.748861][T16986] 0 pages cma reserved
[  937.209118][T17045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2280'.
[ 1040.403280][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1040.410333][    C1] rcu: 	0-...!: (9 ticks this GP) idle=ed14/1/0x4000000000000000 softirq=84159/84170 fqs=1
[ 1040.422454][    C1] rcu: 	(detected by 1, t=10505 jiffies, g=85605, q=223 ncpus=2)
[ 1040.430235][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1040.430276][    C0] NMI backtrace for cpu 0
[ 1040.430293][    C0] CPU: 0 UID: 0 PID: 17073 Comm: syz.4.2278 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[ 1040.430315][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1040.430327][    C0] RIP: 0010:kasan_check_range+0x8c/0x290
[ 1040.430363][    C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84
[ 1040.430387][    C0] RSP: 0018:ffffc900000079d0 EFLAGS: 00000046
[ 1040.430405][    C0] RAX: 0000000000000001 RBX: 1ffffffff2030ad6 RCX: ffffffff817ad690
[ 1040.430419][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901856b0
[ 1040.430432][    C0] RBP: ffffffffffffffff R08: ffffffff901856b7 R09: 1ffffffff2030ad6
[ 1040.430446][    C0] R10: dffffc0000000000 R11: fffffbfff2030ad6 R12: 1ffff92000000f4c
[ 1040.430461][    C0] R13: ffffffff84c0bdf7 R14: dffffc0000000001 R15: fffffbfff2030ad7
[ 1040.430491][    C0] FS:  00007fd9513916c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1040.430508][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1040.430521][    C0] CR2: 000000110c3b64f7 CR3: 0000000011af2000 CR4: 00000000003526f0
[ 1040.430538][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1040.430550][    C0] DR3: 000000002735000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1040.430563][    C0] Call Trace:
[ 1040.430571][    C0]  <NMI>
[ 1040.430581][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 1040.430606][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 1040.430628][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1040.430650][    C0]  ? nmi_handle+0x2a/0x5a0
[ 1040.430679][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1040.430706][    C0]  ? nmi_handle+0x14f/0x5a0
[ 1040.430726][    C0]  ? nmi_handle+0x2a/0x5a0
[ 1040.430747][    C0]  ? kasan_check_range+0x8c/0x290
[ 1040.430774][    C0]  ? default_do_nmi+0x63/0x160
[ 1040.430795][    C0]  ? exc_nmi+0x123/0x1f0
[ 1040.430815][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1040.430833][    C0]  ? debug_object_activate+0x3f7/0x580
[ 1040.430863][    C0]  ? lock_release+0xb0/0xa30
[ 1040.430883][    C0]  ? kasan_check_range+0x8c/0x290
[ 1040.430910][    C0]  ? kasan_check_range+0x8c/0x290
[ 1040.430938][    C0]  ? kasan_check_range+0x8c/0x290
[ 1040.430965][    C0]  </NMI>
[ 1040.430971][    C0]  <IRQ>
[ 1040.430980][    C0]  lock_release+0xb0/0xa30
[ 1040.431003][    C0]  ? do_raw_spin_lock+0x14f/0x370
[ 1040.431030][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1040.431051][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1040.431083][    C0]  _raw_spin_unlock_irqrestore+0x79/0x140
[ 1040.431108][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1040.431138][    C0]  debug_object_activate+0x3f7/0x580
[ 1040.431169][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[ 1040.431196][    C0]  ? advance_sched+0xa02/0xca0
[ 1040.431221][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[ 1040.431243][    C0]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 1040.431269][    C0]  enqueue_hrtimer+0x30/0x3c0
[ 1040.431296][    C0]  __hrtimer_run_queues+0x6cb/0xd30
[ 1040.431330][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1040.431353][    C0]  ? sched_clock+0x4a/0x70
[ 1040.431385][    C0]  ? read_tsc+0x9/0x20
[ 1040.431409][    C0]  ? ktime_get_update_offsets_now+0x393/0x3b0
[ 1040.431433][    C0]  hrtimer_interrupt+0x403/0xa40
[ 1040.431469][    C0]  __sysvec_apic_timer_interrupt+0x110/0x420
[ 1040.431492][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1040.431518][    C0]  </IRQ>
[ 1040.431525][    C0]  <TASK>
[ 1040.431532][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1040.431561][    C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[ 1040.431585][    C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8a 38 b7 f5 48 89 df e8 c2 7f b8 f5 e8 ad 90 e3 f5 fb bf 01 00 00 00 <e8> e2 e4 a9 f5 65 8b 05 13 37 40 74 85 c0 74 06 5b c3 cc cc cc cc
[ 1040.431600][    C0] RSP: 0018:ffffc9000fd1fd00 EFLAGS: 00000286
[ 1040.431617][    C0] RAX: f665b5714fa31f00 RBX: ffff88807a369888 RCX: ffffffff9a378903
[ 1040.431631][    C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001
[ 1040.431645][    C0] RBP: 00000000ffffff83 R08: ffffffff901856b7 R09: 1ffffffff2030ad6
[ 1040.431658][    C0] R10: dffffc0000000000 R11: fffffbfff2030ad7 R12: ffff88807a369800
[ 1040.431673][    C0] R13: 7fffffffffffffff R14: 0000000000000003 R15: ffff88807a369880
[ 1040.431695][    C0]  do_timerfd_settime+0xccf/0xfb0
[ 1040.431724][    C0]  __x64_sys_timerfd_settime+0x16f/0x220
[ 1040.431755][    C0]  ? __pfx___x64_sys_timerfd_settime+0x10/0x10
[ 1040.431789][    C0]  ? do_syscall_64+0x100/0x230
[ 1040.431817][    C0]  ? do_syscall_64+0xb6/0x230
[ 1040.431845][    C0]  do_syscall_64+0xf3/0x230
[ 1040.431871][    C0]  ? clear_bhb_loop+0x35/0x90
[ 1040.431890][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.431916][    C0] RIP: 0033:0x7fd953985d29
[ 1040.431934][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1040.431949][    C0] RSP: 002b:00007fd951391038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e
[ 1040.431967][    C0] RAX: ffffffffffffffda RBX: 00007fd953b76240 RCX: 00007fd953985d29
[ 1040.431981][    C0] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1040.431993][    C0] RBP: 00007fd953a01b08 R08: 0000000000000000 R09: 0000000000000000
[ 1040.432005][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.432016][    C0] R13: 0000000000000000 R14: 00007fd953b76240 R15: 00007ffc64f25748
[ 1040.432038][    C0]  </TASK>
[ 1040.432270][    C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g85605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1040.982395][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1040.992487][    C1] rcu: RCU grace-period kthread stack dump:
[ 1040.998400][    C1] task:rcu_preempt     state:R  running task     stack:26264 pid:17    tgid:17    ppid:2      flags:0x00004000
[ 1041.010212][    C1] Call Trace:
[ 1041.013527][    C1]  <TASK>
[ 1041.016494][    C1]  __schedule+0x17fb/0x4be0
[ 1041.021073][    C1]  ? __pfx___schedule+0x10/0x10
[ 1041.025973][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1041.031048][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1041.037418][    C1]  ? schedule+0x90/0x320
[ 1041.041701][    C1]  schedule+0x14b/0x320
[ 1041.045918][    C1]  schedule_timeout+0x15a/0x290
[ 1041.050832][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1041.056261][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1041.061616][    C1]  ? prepare_to_swait_event+0x330/0x350
[ 1041.067210][    C1]  rcu_gp_fqs_loop+0x2df/0x1330
[ 1041.072102][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1041.077454][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[ 1041.083393][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1041.088716][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1041.094659][    C1]  ? finish_swait+0xd4/0x1e0
[ 1041.099299][    C1]  rcu_gp_kthread+0xa7/0x3b0
[ 1041.103937][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1041.109266][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1041.115210][    C1]  ? __kthread_parkme+0x169/0x1d0
[ 1041.120277][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1041.125520][    C1]  kthread+0x2f0/0x390
[ 1041.129631][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1041.134873][    C1]  ? __pfx_kthread+0x10/0x10
[ 1041.139504][    C1]  ret_from_fork+0x4b/0x80
[ 1041.143954][    C1]  ? __pfx_kthread+0x10/0x10
[ 1041.148587][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1041.153410][    C1]  </TASK>
[ 1041.156462][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1041.162822][    C1] CPU: 1 UID: 0 PID: 3503 Comm: kworker/u8:9 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[ 1041.173707][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1041.183887][    C1] Workqueue: events_unbound toggle_allocation_gate
[ 1041.190458][    C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60
[ 1041.197268][    C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4
[ 1041.216933][    C1] RSP: 0018:ffffc9000d08f6e0 EFLAGS: 00000293
[ 1041.223039][    C1] RAX: ffffffff81938eeb RBX: 1ffff110170c8c65 RCX: ffff888032ab5a00
[ 1041.231054][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1041.239061][    C1] RBP: ffffc9000d08f8e0 R08: ffffffff81938eba R09: 1ffffffff284e310
[ 1041.247067][    C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000
[ 1041.255075][    C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000
[ 1041.263083][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1041.272142][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1041.278758][    C1] CR2: 00007f12e3f77bac CR3: 000000000e736000 CR4: 00000000003526f0
[ 1041.286769][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1041.294773][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1041.302778][    C1] Call Trace:
[ 1041.306098][    C1]  <IRQ>
[ 1041.308976][    C1]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[ 1041.315355][    C1]  ? print_other_cpu_stall+0x1481/0x15c0
[ 1041.321057][    C1]  ? __pfx_print_other_cpu_stall+0x10/0x10
[ 1041.326933][    C1]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[ 1041.333230][    C1]  ? rcu_sched_clock_irq+0xa26/0x10e0
[ 1041.338658][    C1]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 1041.344375][    C1]  ? update_process_times+0x242/0x2f0
[ 1041.350239][    C1]  ? tick_nohz_handler+0x37c/0x500
[ 1041.355432][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 1041.361008][    C1]  ? __hrtimer_run_queues+0x551/0xd30
[ 1041.366463][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1041.372246][    C1]  ? handle_softirqs+0x7e0/0x9b0
[ 1041.377264][    C1]  ? read_tsc+0x9/0x20
[ 1041.381386][    C1]  ? ktime_get_update_offsets_now+0x393/0x3b0
[ 1041.387515][    C1]  ? hrtimer_interrupt+0x403/0xa40
[ 1041.392707][    C1]  ? __sysvec_apic_timer_interrupt+0x110/0x420
[ 1041.398920][    C1]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1041.404771][    C1]  </IRQ>
[ 1041.407743][    C1]  <TASK>
[ 1041.410723][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1041.416946][    C1]  ? smp_call_function_many_cond+0x19da/0x2c60
[ 1041.423208][    C1]  ? smp_call_function_many_cond+0x1a0b/0x2c60
[ 1041.429439][    C1]  ? smp_call_function_many_cond+0x19f3/0x2c60
[ 1041.435662][    C1]  ? __pfx_do_sync_core+0x10/0x10
[ 1041.440759][    C1]  ? __pfx___text_poke+0x10/0x10
[ 1041.445858][    C1]  ? process_scheduled_works+0x976/0x1840
[ 1041.451646][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1041.458038][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1041.463387][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1041.469350][    C1]  ? __pfx_do_sync_core+0x10/0x10
[ 1041.474438][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[ 1041.479616][    C1]  text_poke_bp_batch+0x352/0xb30
[ 1041.484713][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1041.490778][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[ 1041.496997][    C1]  ? __pfx_text_poke_bp_batch+0x10/0x10
[ 1041.502609][    C1]  ? arch_jump_label_transform_queue+0x9b/0x100
[ 1041.508902][    C1]  ? process_scheduled_works+0x976/0x1840
[ 1041.514671][    C1]  text_poke_finish+0x30/0x50
[ 1041.519388][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[ 1041.525497][    C1]  static_key_enable_cpuslocked+0x136/0x260
[ 1041.531431][    C1]  static_key_enable+0x1a/0x20
[ 1041.536232][    C1]  toggle_allocation_gate+0xbc/0x260
[ 1041.541560][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1041.547499][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1041.553874][    C1]  process_scheduled_works+0xa66/0x1840
[ 1041.559495][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1041.565528][    C1]  ? assign_work+0x364/0x3d0
[ 1041.570169][    C1]  worker_thread+0x870/0xd30
[ 1041.574809][    C1]  ? __kthread_parkme+0x169/0x1d0
[ 1041.579874][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1041.585024][    C1]  kthread+0x2f0/0x390
[ 1041.589128][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1041.594269][    C1]  ? __pfx_kthread+0x10/0x10
[ 1041.598895][    C1]  ret_from_fork+0x4b/0x80
[ 1041.603340][    C1]  ? __pfx_kthread+0x10/0x10
[ 1041.607979][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1041.612817][    C1]  </TASK>